level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=5.014057ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="121.303µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=2.193259ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.611µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.395328ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.022µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="137.963µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="91.362µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="111.403µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="125.575µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="516.624µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.004276ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.013564ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="48.711µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="41.461µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="303.019µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="167.265µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="152.445µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=44.485898ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="141.854µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.3.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.323367ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="6.23µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.276666ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.911µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.781237ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="8.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="37.061µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="21.48µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="49.271µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="426.732µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="29.991µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="471.883µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="964.367µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.100421ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="21.97µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.3 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.3 ipAddr.ipv6="" k8sNodeIP=199.204.45.3 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.3" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.120" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.3" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.3} {CiliumInternalIP 10.0.0.120}] 10.0.0.0/24 [] [] 10.0.0.67 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46879" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.463272289s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="22.631µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="13.592µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="59.151µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="12.14µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.555692233s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 699ae85f-532d-46e1-bd45-ce7b3f5520d7 default }" containerID=7940a7a5f6aa34c1ee1143b129f4daacca8ab46a4edcabf0e9cfc8e2f7e30047 datapathConfiguration="&{false false false false false }" interface=lxc161bb5226730 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7940a7a5f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7940a7a5f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.138 e9cf658e-5cac-43bd-8f74-1407e1e0ebef default }" containerID=2494fb496d6d46859198194ab657d05727d688e9c0aaef44b0fc96c5ad39901d datapathConfiguration="&{false false false false false }" interface=lxcf47a3966ed28 k8sPodName=kube-system/coredns-7c96b6546b-mq76k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7940a7a5f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=569 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=7940a7a5f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=569 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=1655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2506 identity=1655 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=296.861068ms file-path=/var/run/cilium/state/templates/a90c89f90d9435946676420bcdc41376d3065dafa61a89af31f950ec68e95998/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2858 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=4 identityLabels="reserved:health" ipv4=10.0.0.67 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.063938493s file-path=/var/run/cilium/state/templates/a8616d925b93c2ada709fe1308c16748e2be6525ad2a31ef316233f063863a4d/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=431 identity=4 ipv4=10.0.0.67 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7940a7a5f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3215 identity=569 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2494fb496d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2506 identity=1655 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=endpoint level=info msg="Successful endpoint creation" containerID=7940a7a5f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3215 identity=569 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=daemon level=info msg="Successful endpoint creation" containerID=2494fb496d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2506 identity=1655 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7940a7a5f6 endpointID=3215 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-wc6rb subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=7368961e-8225-4a7a-aac1-9f2d127f3f6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=7940a7a5f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3215 identity=569 ipv4=10.0.0.177 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-wc6rb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 e9513558-e915-4890-8659-adac435f0fa8 default }" containerID=63871504f4bc03612c6685bdaea2faced3ffee12f30a6b2bda8bd0b3cf37d653 datapathConfiguration="&{false false false false false }" interface=lxc60b360f73dd4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63871504f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63871504f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63871504f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=27433 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=63871504f4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=27433 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63871504f4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=954 identity=27433 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr subsys=endpoint level=info msg="Successful endpoint creation" containerID=63871504f4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=954 identity=27433 ipv4=10.0.0.30 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-lpgzr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2858 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02858 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02858 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02858 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02858:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2858 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.19 83d6c598-0583-486e-92d3-c84fca599160 default }" containerID=0039572e99d72601a2358c63fab6be595ddc8f4aba74fd1bce196c839cfdafe3 datapathConfiguration="&{false false false false false }" interface=lxce4521fc19a9e k8sPodName=kube-system/coredns-67659f764b-d8sbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0039572e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0039572e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0039572e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=1655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0039572e99 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=646 identity=1655 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.174 cd386972-2a08-4597-b81e-e599f11331b1 default }" containerID=8abf926a47f2ded2604fd2aded6df2abfe3834294df0cfe0bdf0a52de50cbc05 datapathConfiguration="&{false false false false false }" interface=lxc0c0fd0ae4714 k8sPodName=kube-system/coredns-67659f764b-gbspw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8abf926a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2435 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8abf926a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2435 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8abf926a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2435 identity=1655 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8abf926a47 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2435 identity=1655 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0039572e99 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=646 identity=1655 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0039572e99 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=646 identity=1655 ipv4=10.0.0.19 ipv6= k8sPodName=kube-system/coredns-67659f764b-d8sbb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8abf926a47 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2435 identity=1655 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw subsys=endpoint level=info msg="Successful endpoint creation" containerID=8abf926a47 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2435 identity=1655 ipv4=10.0.0.174 ipv6= k8sPodName=kube-system/coredns-67659f764b-gbspw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.92 0355db76-d2f7-4c12-90a9-54813024eafd default }" containerID=f0ea99eab983d59548a674ffdce914c39154a3e31a0bfd8d58ea894d63e81352 datapathConfiguration="&{false false false false false }" interface=lxc4ebdd27c6a6a k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0ea99eab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0ea99eab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0ea99eab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=41561 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0ea99eab9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=41561 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0ea99eab9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=760 identity=41561 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0ea99eab9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=760 identity=41561 ipv4=10.0.0.92 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7pjzk subsys=daemon level=info msg="Delete endpoint request" containerID=2494fb496d endpointID=2506 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-mq76k subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=2494fb496d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2506 identity=1655 ipv4=10.0.0.138 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-mq76k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 336ab96e-be30-4d21-bf58-5b983e962f2d default }" containerID=67cc32ec49829e980e77c38402065b3e1ea423b1ac1463d23dc89b14c3930757 datapathConfiguration="&{false false false false false }" interface=lxc29cc2345b885 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67cc32ec49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 cf929382-01ae-4a14-8b7a-cb2df13c5b5b default }" containerID=1d19cfd87ed3be802cc2bc3afbc9911f22eb71214fc569d29643bdd4d33dfa38 datapathConfiguration="&{false false false false false }" interface=lxc67e5505e7380 k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=67cc32ec49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67cc32ec49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=15002 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67cc32ec49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3110 identity=15002 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identity=2391 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4072 identity=2391 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 ff8cd233-b8b5-4f1c-9cd6-d60584a800b8 default }" containerID=1f9a38bacdeefc4ad9990fa99ae1c1e4b55a4e70953bde206a0db0e033de1a11 datapathConfiguration="&{false false false false false }" interface=lxc159150ecf704 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f9a38bacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f9a38bacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f9a38bacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=8970 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f9a38bacd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=8970 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67cc32ec49 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3110 identity=15002 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl subsys=endpoint level=info msg="Successful endpoint creation" containerID=67cc32ec49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3110 identity=15002 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-rc4pl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1d19cfd87e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4072 identity=2391 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d19cfd87e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4072 identity=2391 ipv4=10.0.0.254 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-x2l4t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1f9a38bacd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2004 identity=8970 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f9a38bacd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2004 identity=8970 ipv4=10.0.0.189 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9tz4b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.194 742c3f64-6f1a-4acb-9aa0-087592fb8fde default }" containerID=5db9e5c9995ce88133d6c3331ab2c2c53f5b46763e21de5250ba04fff567cc11 datapathConfiguration="&{false false false false false }" interface=lxcfcca02e3d156 k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5db9e5c999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5db9e5c999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3a5e8090-2b59-490e-a621-5493f434f877,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3a5e8090-2b59-490e-a621-5493f434f877,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=3a5e8090-2b59-490e-a621-5493f434f877;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=3a5e8090-2b59-490e-a621-5493f434f877;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5db9e5c999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=8858 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3a5e8090-2b59-490e-a621-5493f434f877,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3a5e8090-2b59-490e-a621-5493f434f877,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5db9e5c999 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2096 identity=8858 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5db9e5c999 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2096 identity=8858 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5db9e5c999 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2096 identity=8858 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5db9e5c999 endpointID=2096 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-8rfn5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=3a5e8090-2b59-490e-a621-5493f434f877 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=3a5e8090-2b59-490e-a621-5493f434f877 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=5db9e5c999 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2096 identity=8858 ipv4=10.0.0.194 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-8rfn5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 e45ed8a5-2b92-47eb-8a8d-d7e6b09f73dd default }" containerID=014c1eb8ec3b05e85812e27fe2c892cf2febd1b42e17b469b38401c3e6e6c9de datapathConfiguration="&{false false false false false }" interface=lxce52aa1de8128 k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=30995 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=116 identity=30995 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=014c1eb8ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=116 identity=30995 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=014c1eb8ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=116 identity=30995 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=014c1eb8ec endpointID=116 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-h5vcj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ee4291c2-3114-48ac-872c-559e1cf8b306 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=014c1eb8ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=116 identity=30995 ipv4=10.0.0.57 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-h5vcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 7618f8c2-1cf0-45a1-9176-424b418aee06 default }" containerID=802e172d70a3aee4168f845ad419682aa317d77af95a79fa3198590b0f35d45d datapathConfiguration="&{false false false false false }" interface=lxc7050185b9d95 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=802e172d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=802e172d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=802e172d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identity=11780 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=802e172d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1400 identity=11780 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=802e172d70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1400 identity=11780 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr subsys=endpoint level=info msg="Successful endpoint creation" containerID=802e172d70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1400 identity=11780 ipv4=10.0.0.87 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-z7bjr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.112 da491743-bc43-4ab6-956b-c2d576d3d783 default }" containerID=c753c19eb3d7b3dce4930b340c88f15497219d8db9c3ed57a828442c5fa3cc52 datapathConfiguration="&{false false false false false }" interface=lxc72442ac95802 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c753c19eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c753c19eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c753c19eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identity=3674 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c753c19eb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3576 identity=3674 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c753c19eb3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3576 identity=3674 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=endpoint level=info msg="Successful endpoint creation" containerID=c753c19eb3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3576 identity=3674 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c753c19eb3 endpointID=3576 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-hkkql subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=18da3c44-3e5d-45b4-b3a0-35aae6e745ea k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=c753c19eb3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3576 identity=3674 ipv4=10.0.0.112 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-hkkql subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=0f9ce984-694a-429f-ae49-7bea69926bcc] Description:}]" policyAddRequest=c88bb01e-0d3c-4e36-a66a-7f5cf412335f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c88bb01e-0d3c-4e36-a66a-7f5cf412335f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=19d23f3d-f544-45af-81f8-9cad386e43d9] Description:}]" policyAddRequest=f3201f66-5e6a-4761-be7d-750856af911e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f3201f66-5e6a-4761-be7d-750856af911e policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.101 798b64d7-4a65-4368-a584-eddeb46c9cb5 default }" containerID=04e2d6c938e302fcb72cc9177baf144a19186589b3f60fdad144115e92581470 datapathConfiguration="&{false false false false false }" interface=lxcab298668eaea k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=04e2d6c938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=04e2d6c938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=04e2d6c938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identity=32752 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=04e2d6c938 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3970 identity=32752 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 4731f7b1-0213-4ccc-84ac-efad9610e500 default }" containerID=808a6fe48b3866ee85f4e5da88449d1a8c142fa4bdf72fa576f95fd4f57747d9 datapathConfiguration="&{false false false false false }" interface=lxcd01dc5bc8529 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=808a6fe48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=808a6fe48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=808a6fe48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=28516 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=808a6fe48b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3356 identity=28516 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=04e2d6c938 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3970 identity=32752 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=04e2d6c938 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3970 identity=32752 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-mjfr6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=808a6fe48b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3356 identity=28516 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn subsys=endpoint level=info msg="Successful endpoint creation" containerID=808a6fe48b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3356 identity=28516 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-qk2jn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 f31e0fe1-7471-4cae-9ea8-8c658b46b0fa default }" containerID=1eb9e37a2a9391d0eba20afda22fd13d547e6120a82fe539a2c1de794a73546d datapathConfiguration="&{false false false false false }" interface=lxc2799b113f8f1 k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1eb9e37a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1eb9e37a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=1eb9e37a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=43620 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1eb9e37a2a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=687 identity=43620 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1eb9e37a2a datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=687 identity=43620 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=1eb9e37a2a datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=687 identity=43620 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-7qhvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 8b4b9369-f33f-4f4e-8d23-67c017cafedb default }" containerID=82cfc99e7def4ee604e37fa1e78c7f3f42e37a146228bfbc4b8ae3f658e842fb datapathConfiguration="&{false false false false false }" interface=lxc75ac6f797ee7 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=82cfc99e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=82cfc99e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=82cfc99e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=49562 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=82cfc99e7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=250 identity=49562 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=82cfc99e7d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=250 identity=49562 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=82cfc99e7d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=250 identity=49562 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.181 c554fa61-cd6f-4091-859c-4cc6037b12e7 default }" containerID=e2d3cb4c8500780072a51449d17f5c494126bc4725b1895de5427eaee5038fd5 datapathConfiguration="&{false false false false false }" interface=lxc6bda4777de25 k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2d3cb4c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2d3cb4c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e2d3cb4c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2d3cb4c85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1124 identity=19108 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2d3cb4c85 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1124 identity=19108 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2d3cb4c85 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1124 identity=19108 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e2d3cb4c85 endpointID=1124 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e2d3cb4c85 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1124 identity=19108 ipv4=10.0.0.181 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dae4ca77-2395-4fa7-b935-8d5239b83a9d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 e946e4fd-82e0-46d1-a88e-7c274160267a default }" containerID=10542d37d1b8b38d4e7374b1032485f32dd08f95f92b7ebc0761ed35f9197ef9 datapathConfiguration="&{false false false false false }" interface=lxc1ac4d09a1679 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10542d37d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10542d37d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10542d37d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=8479 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10542d37d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=37 identity=8479 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=10542d37d1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=37 identity=8479 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10542d37d1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=37 identity=8479 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=554efd4d-edbf-4607-a3bf-2f9d539a78cb] Description:}]" policyAddRequest=52ae731e-00f4-4aa7-b86b-cd55ce53ff3c subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=52ae731e-00f4-4aa7-b86b-cd55ce53ff3c policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.155 5a7c416c-f414-40b6-84a4-6140e9406f39 default }" containerID=4987f39c05c639e3a0de294298f887c18579fe3e3d666a7d1b035b585799abb4 datapathConfiguration="&{false false false false false }" interface=lxc6ecf7325969c k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4987f39c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4987f39c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4987f39c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4987f39c05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2458 identity=19108 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4987f39c05 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2458 identity=19108 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=endpoint level=info msg="Successful endpoint creation" containerID=4987f39c05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2458 identity=19108 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=daemon level=info msg="Delete endpoint request" containerID=4987f39c05 endpointID=2458 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4987f39c05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2458 identity=19108 ipv4=10.0.0.155 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fac8eded-557d-4dcb-92b4-c3211db247ab subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 a0aa4d6f-0fa5-4ebf-b434-f631639847a0 default }" containerID=77fde77479a8fe863f7207390407b56fe3bbae5e68a343ed56da548d8819b6b4 datapathConfiguration="&{false false false false false }" interface=lxcd5433db0ea2b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77fde77479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77fde77479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77fde77479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=28238 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=77fde77479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=485 identity=28238 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=77fde77479 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=485 identity=28238 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=77fde77479 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=485 identity=28238 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=e840f3a1-23b4-4efc-87c2-4dd4b7476a4a] Description:}]" policyAddRequest=82ab91f0-ec24-45ab-a9a9-547cae55f566 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=82ab91f0-ec24-45ab-a9a9-547cae55f566 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.7 ece63d51-fe9d-4ff2-b503-4c9260d98e1e default }" containerID=116ebaaf28758d1da7b115d88a5c3099a9fec5c2910ec959eefb82d1d03f7918 datapathConfiguration="&{false false false false false }" interface=lxc872acb34d469 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=4553 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=312 identity=4553 ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=116ebaaf28 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=312 identity=4553 ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=116ebaaf28 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=312 identity=4553 ipv4=10.0.0.7 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.008941252857548663 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.31 841f9a8c-8711-4769-ae9e-c0c9bc623498 default }" containerID=a500e9c2ad9f7f8586df7eee624db50e62f4ce8ab527432fd34bde1289f8b947 datapathConfiguration="&{false false false false false }" interface=lxcab1650badd18 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.143 39761ed2-f07e-4838-b449-322e56bbd74d default }" containerID=f5f02dc14875db3922539711bf0dc60921df3885b4b8c22a853a02013bf90258 datapathConfiguration="&{false false false false false }" interface=lxc20b126cf4b67 k8sPodName=monitoring/node-feature-discovery-worker-qxf24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs subsys=endpoint level=info msg="New endpoint" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=9676 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1101 identity=9676 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=35663 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=35663 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5f02dc148 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=956 identity=35663 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5f02dc148 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=956 identity=35663 ipv4=10.0.0.143 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-qxf24 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 93943e87-4cf7-4aab-a676-dbaa0d39fbd5 default }" containerID=77dffba1ab4e2d4d7c9078db4ac2aed76cba80ec34dd820b8564060e033a0988 datapathConfiguration="&{false false false false false }" interface=lxc21567031dfd0 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77dffba1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77dffba1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77dffba1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identity=29241 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77dffba1ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3758 identity=29241 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a500e9c2ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1101 identity=9676 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=a500e9c2ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1101 identity=9676 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-f6mvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=77dffba1ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3758 identity=29241 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj subsys=endpoint level=info msg="Successful endpoint creation" containerID=77dffba1ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3758 identity=29241 ipv4=10.0.0.84 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5l5cj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 798ebfda-68d5-47c7-85b9-ba07ada36779 default }" containerID=f7b875336de00b314f2dc5e2f970bf8c52a9808016d1e633a033605c3813dd74 datapathConfiguration="&{false false false false false }" interface=lxc01cbaa4b9ce2 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7b875336d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7b875336d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7b875336d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=63619 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7b875336d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=330 identity=63619 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7b875336d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=330 identity=63619 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7b875336d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=330 identity=63619 ipv4=10.0.0.188 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-689jd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02858 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02858 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02858 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02858:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 a038c8b0-f57a-4734-b57a-70e7db14963b default }" containerID=8ee138720c7a2b0e12ccc33d4e2ced1b67a287e7c627e5b7848912e5c299bc14 datapathConfiguration="&{false false false false false }" interface=lxcde77481738ee k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ee138720c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ee138720c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ee138720c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=6525 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8ee138720c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=6525 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ee138720c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=6525 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ee138720c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=6525 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=daemon level=info msg="Delete endpoint request" containerID=8ee138720c endpointID=7 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8cbgt subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=54f9c6d9-f277-4abf-b805-14b658ece045 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=8ee138720c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=6525 ipv4=10.0.0.230 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8cbgt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 1dff7e23-a6dd-4599-8625-7974d8779971 default }" containerID=178b811c51743111c2bb26cb90078d9809bb0af40b0e4c2497889221a946a3c3 datapathConfiguration="&{false false false false false }" interface=lxc8a01327f6caf k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identity=9979 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3805 identity=9979 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 1b485170-15a1-4940-bc46-39fdd31e3c21 default }" containerID=791bcc1e4230da6bfc1b6063d813e9aa9ec93575b68a7d8295507cf1fe74a463 datapathConfiguration="&{false false false false false }" interface=lxc6cf2f441a3f8 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=791bcc1e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=791bcc1e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=791bcc1e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=33643 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=791bcc1e42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=33643 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 d23bbd62-c0e4-4e2f-a699-759bbe773236 default }" containerID=9e957996035a34b87d7500f910aa088920705420310be0bda62a4a131b9dd5a8 datapathConfiguration="&{false false false false false }" interface=lxc2e2b51eee822 k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e95799603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e95799603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e95799603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=35754 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e95799603 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=282 identity=35754 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=178b811c51 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3805 identity=9979 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=178b811c51 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3805 identity=9979 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-szrqd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=791bcc1e42 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=274 identity=33643 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh subsys=endpoint level=info msg="Successful endpoint creation" containerID=791bcc1e42 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=274 identity=33643 ipv4=10.0.0.198 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nm5dh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9e95799603 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=282 identity=35754 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e95799603 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=282 identity=35754 ipv4=10.0.0.244 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f6444c968-spskd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 3b705ebe-dfa1-4281-a2d9-ee3a2d305684 default }" containerID=e26fe9d11e6683839e3168125fcd7d663b2ab10dfc8e80bb28740722dd566777 datapathConfiguration="&{false false false false false }" interface=lxcccecc458093e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e26fe9d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e26fe9d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e26fe9d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=1137 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e26fe9d11e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=1137 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e26fe9d11e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=142 identity=1137 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e26fe9d11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=142 identity=1137 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 19839660-84bb-41d7-ab56-83bf47c7caf2 default }" containerID=b740c8e98a284c453748907cda6b0252046a1bf12e624b904adb4e79770d699c datapathConfiguration="&{false false false false false }" interface=lxc95cd56b03799 k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b740c8e98a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b740c8e98a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b740c8e98a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b740c8e98a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2557 identity=19108 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b740c8e98a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2557 identity=19108 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=endpoint level=info msg="Successful endpoint creation" containerID=b740c8e98a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2557 identity=19108 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.230 2a223a3e-7cb1-413f-9cb0-dc7c9f875763 default }" containerID=c9ad2a2d86b0877b48529fae3d3506769d03a9d16ae51359ddf7dfbb15bed144 datapathConfiguration="&{false false false false false }" interface=lxc1b431e4a7119 k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9ad2a2d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9ad2a2d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c9ad2a2d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9ad2a2d86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3424 identity=19108 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9ad2a2d86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3424 identity=19108 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9ad2a2d86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3424 identity=19108 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=daemon level=info msg="Delete endpoint request" containerID=e26fe9d11e endpointID=142 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-h5fzb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d8ec3dbd-5f0e-43c8-b073-9504ea5a2645 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e26fe9d11e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=142 identity=1137 ipv4=10.0.0.146 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-h5fzb subsys=endpoint level=info msg="Delete endpoint request" containerID=b740c8e98a endpointID=2557 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b740c8e98a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2557 identity=19108 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-038853b3-3220-40ba-a525-b77c0101baed subsys=endpoint level=info msg="Delete endpoint request" containerID=c9ad2a2d86 endpointID=3424 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c9ad2a2d86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3424 identity=19108 ipv4=10.0.0.230 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4bdef1e1-935f-4fbd-b83a-8344df5180ee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 92d204fc-88ce-419a-96bb-4b5740a4b487 default }" containerID=3aebab5e293abc6e6830eec6d1c402c2dcaa67f48a53d1645790abf36567c69c datapathConfiguration="&{false false false false false }" interface=lxcc2a38ddcb35d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3aebab5e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3aebab5e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3aebab5e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=875 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3aebab5e29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2883 identity=875 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3aebab5e29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2883 identity=875 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3aebab5e29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2883 identity=875 ipv4=10.0.0.225 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 27529046-2929-4516-8e28-2210d6fd2a21 default }" containerID=34f339c95d3805091ca2660580b7d654f85468486cb757877d7c34543a3df1e2 datapathConfiguration="&{false false false false false }" interface=lxc696c48f31caf k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34f339c95d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34f339c95d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34f339c95d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=14764 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=34f339c95d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2584 identity=14764 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34f339c95d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2584 identity=14764 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34f339c95d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2584 identity=14764 ipv4=10.0.0.210 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.71 84920465-a6ad-4897-ba4f-e725780abc8d default }" containerID=a270357cb3fc2b75b0ae95e7c6319c5c8a7109f47fc6cb89e1af33dfceda077f datapathConfiguration="&{false false false false false }" interface=lxc8b84c92a3563 k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a270357cb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a270357cb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a270357cb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=30538 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a270357cb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=30538 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.80 f77cbf0d-8c77-4b9a-9e42-571ea733cc1f default }" containerID=88a78567d0957ccf98594ccafd99e37babf0029e4ce4fd446c6965f6a720ee4a datapathConfiguration="&{false false false false false }" interface=lxc0495b18ea7ef k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=88a78567d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=88a78567d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=88a78567d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=1050 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=88a78567d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2010 identity=1050 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a270357cb3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3731 identity=30538 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl subsys=endpoint level=info msg="Successful endpoint creation" containerID=a270357cb3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3731 identity=30538 ipv4=10.0.0.71 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dvxnl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 8236ea1f-0d6d-4ebd-af54-8b2cf4b7b91b default }" containerID=10c185de3e8ecd428c3cd188f0f9280123e0c873f5ccfd90af77071ddb9142e1 datapathConfiguration="&{false false false false false }" interface=lxc0bb3cca0c7fc k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10c185de3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10c185de3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10c185de3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=2880 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10c185de3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2939 identity=2880 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=88a78567d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2010 identity=1050 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=88a78567d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2010 identity=1050 ipv4=10.0.0.80 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=10c185de3e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2939 identity=2880 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10c185de3e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2939 identity=2880 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 a747b4f0-a876-4ce3-8fb4-a300c1ac5429 default }" containerID=f74ef47f351e0be815ea3282f49d793c7249886cd2441aab6bff77901a59bc10 datapathConfiguration="&{false false false false false }" interface=lxc2dc61a22a7b1 k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f74ef47f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f74ef47f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f74ef47f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f74ef47f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=19108 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f74ef47f35 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=19108 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f74ef47f35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=19108 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 990cd661-2062-4063-acc2-8f1719bc594d default }" containerID=efc1934841f3a8f6a3e79930aac42fbeab1c614ea76bbb54c3f218570dd61f3e datapathConfiguration="&{false false false false false }" interface=lxcd425322360ca k8sPodName=monitoring/vector-7246c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=efc1934841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=efc1934841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=efc1934841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identity=15071 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=efc1934841 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3958 identity=15071 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=efc1934841 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3958 identity=15071 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c subsys=endpoint level=info msg="Successful endpoint creation" containerID=efc1934841 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3958 identity=15071 ipv4=10.0.0.122 ipv6= k8sPodName=monitoring/vector-7246c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f74ef47f35 endpointID=367 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f74ef47f35 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=19108 ipv4=10.0.0.247 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4d1e900e-e734-40c9-86ef-b6a6ac96d6c9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 c953ffe1-1c40-42b4-a4b4-284187c19579 default }" containerID=a5b733838eb26e9dff5d451e9bd17cd2fabf2f35958575d14b063f7a4639eae5 datapathConfiguration="&{false false false false false }" interface=lxc1767ae4bc4e9 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5b733838e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5b733838e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5b733838e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=29487 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5b733838e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=29487 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a5b733838e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1799 identity=29487 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5b733838e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1799 identity=29487 ipv4=10.0.0.166 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.209 7ad99390-7846-4ad7-9380-100da8b83a8d default }" containerID=ce739968a5019b131ba1b7bd27ce8b8f26c43ba00b87991903c031b43b2e8557 datapathConfiguration="&{false false false false false }" interface=lxccf6d7c74e68a k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce739968a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce739968a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce739968a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5611 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce739968a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=5611 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce739968a5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=5611 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce739968a5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=5611 ipv4=10.0.0.209 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-bdrlx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.59 514ccab4-f8b2-4e63-80bc-d32eefff76fe default }" containerID=bb6bd29b8e75e98a4a85b0e7e6d51b77ac34ea00859852e126576cadeffa5ee9 datapathConfiguration="&{false false false false false }" interface=lxc3fa4bc14fba9 k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb6bd29b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb6bd29b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb6bd29b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=2309 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb6bd29b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=650 identity=2309 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb6bd29b8e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=650 identity=2309 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb6bd29b8e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=650 identity=2309 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-cpcw6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 9492ef21-3480-4e2a-9279-e8d6ba6c2012 default }" containerID=e51d8e68cb276a50c6f367aa961f786027d1af877195d66137da91a00d96c363 datapathConfiguration="&{false false false false false }" interface=lxc0b217ca0a77d k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e51d8e68cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e51d8e68cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e51d8e68cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e51d8e68cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=468 identity=19108 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e51d8e68cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=468 identity=19108 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e51d8e68cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=19108 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=daemon level=info msg="Delete endpoint request" containerID=e51d8e68cb endpointID=468 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e51d8e68cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=468 identity=19108 ipv4=10.0.0.11 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4c77afd4-e35f-4ece-b6e4-64f6bf05edfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 aebf65d3-9fc9-45cc-91c6-6298272699ba default }" containerID=a815899b396f782d7ef5e4f37bdbbe624664dd24ab4806f7519e1535ce8b0f9d datapathConfiguration="&{false false false false false }" interface=lxc32fc6b40cd85 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a815899b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a815899b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a815899b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=7891 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a815899b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=7891 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a815899b39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=376 identity=7891 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a815899b39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=376 identity=7891 ipv4=10.0.0.237 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.215 4530501a-a2bc-4eca-b07a-83cd60860517 default }" containerID=e6dfaa163845cd6083c7057821e89bbe67c8cd07640daa1a5f9ea97197db0157 datapathConfiguration="&{false false false false false }" interface=lxcd0aba0c0ae67 k8sPodName=openstack/keystone-api-676c5f5999-slxtp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e6dfaa1638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e6dfaa1638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e6dfaa1638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=33182 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e6dfaa1638 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2963 identity=33182 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e6dfaa1638 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2963 identity=33182 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e6dfaa1638 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2963 identity=33182 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-api-676c5f5999-slxtp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 e96cff3c-9004-4ffc-a9db-db139a232bee default }" containerID=095d6a86374ff9981754884272f7daf40da004efa2b1c19bf06cefaf2e5c14d0 datapathConfiguration="&{false false false false false }" interface=lxcf577bd3f2275 k8sPodName=openstack/keystone-credential-setup-cp579 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=095d6a8637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=095d6a8637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=095d6a8637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=53667 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=095d6a8637 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3204 identity=53667 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=095d6a8637 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3204 identity=53667 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=endpoint level=info msg="Successful endpoint creation" containerID=095d6a8637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3204 identity=53667 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=095d6a8637 endpointID=3204 k8sNamespace=openstack k8sPodName=keystone-credential-setup-cp579 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=26a5a39f-dd9f-48d7-8d7c-194acef2c532 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=095d6a8637 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3204 identity=53667 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-credential-setup-cp579 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 87c15b86-df47-41b8-9035-f56b364ccbc2 default }" containerID=4600b24c65aa01787346eb60737a0ece1029bd799c478fe1c85a45e6a4cc9b48 datapathConfiguration="&{false false false false false }" interface=lxcf964467da5a0 k8sPodName=openstack/keystone-db-init-qqv9f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4600b24c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4600b24c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01206d74-d31c-4f75-8d79-293d4497179a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=01206d74-d31c-4f75-8d79-293d4497179a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=01206d74-d31c-4f75-8d79-293d4497179a;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=01206d74-d31c-4f75-8d79-293d4497179a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4600b24c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=59046 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=01206d74-d31c-4f75-8d79-293d4497179a,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=01206d74-d31c-4f75-8d79-293d4497179a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4600b24c65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1554 identity=59046 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4600b24c65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1554 identity=59046 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=endpoint level=info msg="Successful endpoint creation" containerID=4600b24c65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1554 identity=59046 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4600b24c65 endpointID=1554 k8sNamespace=openstack k8sPodName=keystone-db-init-qqv9f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=01206d74-d31c-4f75-8d79-293d4497179a k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=01206d74-d31c-4f75-8d79-293d4497179a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4600b24c65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1554 identity=59046 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/keystone-db-init-qqv9f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 4093a83e-9734-417d-8a43-c45ba6ebb1a4 default }" containerID=e5e4d71f7f05ffe5c8588aa9c1130d23d1238a7acdce092c6f0b9ec57e9e1a49 datapathConfiguration="&{false false false false false }" interface=lxcb3ae05026592 k8sPodName=openstack/keystone-fernet-setup-89qxp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e5e4d71f7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e5e4d71f7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e5e4d71f7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=25298 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e5e4d71f7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=25298 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e5e4d71f7f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=182 identity=25298 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=endpoint level=info msg="Successful endpoint creation" containerID=e5e4d71f7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=25298 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e5e4d71f7f endpointID=182 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-89qxp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ad4a9bea-29f7-4d93-b7c9-d3d695cd08ca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e5e4d71f7f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=182 identity=25298 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-fernet-setup-89qxp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 62bb05ac-a1dc-4964-a5bb-c4080ebd7604 default }" containerID=ca1b5b55ba1f08e68b7a501805f3620f6a675122d1588ed97b7984ca8dfeef46 datapathConfiguration="&{false false false false false }" interface=lxca8537435d053 k8sPodName=openstack/keystone-db-sync-52vq7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca1b5b55ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca1b5b55ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ca1b5b55ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identity=36681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca1b5b55ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1842 identity=36681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ca1b5b55ba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1842 identity=36681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca1b5b55ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1842 identity=36681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ca1b5b55ba endpointID=1842 k8sNamespace=openstack k8sPodName=keystone-db-sync-52vq7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8a820c91-0f6e-4eaf-9700-dac2dc33c74b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ca1b5b55ba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1842 identity=36681 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-db-sync-52vq7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 4531e4cf-d96c-4eff-a1d3-f19b352e9e60 default }" containerID=d754dc409e188ed5604ad8b4d42e9f0965b84c84ff608325c4a7ffb9098458d1 datapathConfiguration="&{false false false false false }" interface=lxc809fc6f4e71e k8sPodName=openstack/keystone-rabbit-init-8qdhr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=47026 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3169 identity=47026 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d754dc409e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3169 identity=47026 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=endpoint level=info msg="Successful endpoint creation" containerID=d754dc409e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=47026 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d754dc409e endpointID=3169 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-8qdhr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=29c4ae74-9d55-4f3f-b03f-114e6d71fe7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d754dc409e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3169 identity=47026 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/keystone-rabbit-init-8qdhr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 dd5046ea-8998-48ef-befd-b9129de5598f default }" containerID=2891612d83b8c89d443a5d2f33b3ccd0c099a920f16b38cb2370894fc194ac44 datapathConfiguration="&{false false false false false }" interface=lxcc00f15b5cca4 k8sPodName=openstack/keystone-domain-manage-bhgfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=23594 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1035 identity=23594 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2891612d83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1035 identity=23594 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=2891612d83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=23594 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2891612d83 endpointID=1035 k8sNamespace=openstack k8sPodName=keystone-domain-manage-bhgfh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=abf85c5f-d2c0-407c-af5d-cf20d42d6552 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2891612d83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1035 identity=23594 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-domain-manage-bhgfh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 49d57c7b-1993-49b3-9804-a108c629403f default }" containerID=f9d40949c4b837a3278d3d990827503d9dfc4214f076a3437a4d990e15a46fc1 datapathConfiguration="&{false false false false false }" interface=lxc914f8a659702 k8sPodName=openstack/keystone-bootstrap-hktqb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9d40949c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9d40949c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b091016f-95bb-4c73-b966-261fc658127c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b091016f-95bb-4c73-b966-261fc658127c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b091016f-95bb-4c73-b966-261fc658127c;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b091016f-95bb-4c73-b966-261fc658127c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9d40949c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=3131 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b091016f-95bb-4c73-b966-261fc658127c,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b091016f-95bb-4c73-b966-261fc658127c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9d40949c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=507 identity=3131 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9d40949c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=507 identity=3131 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9d40949c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=3131 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f9d40949c4 endpointID=507 k8sNamespace=openstack k8sPodName=keystone-bootstrap-hktqb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b091016f-95bb-4c73-b966-261fc658127c k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b091016f-95bb-4c73-b966-261fc658127c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f9d40949c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=507 identity=3131 ipv4=10.0.0.167 ipv6= k8sPodName=openstack/keystone-bootstrap-hktqb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.111 4da9ed43-5ba6-48c6-b898-40b14c84fb35 default }" containerID=83c0ebe3adce1492bd7837b5385744bdeac84ec85ff32200719ac4abba57d962 datapathConfiguration="&{false false false false false }" interface=lxc5709390e71c9 k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83c0ebe3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83c0ebe3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83c0ebe3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83c0ebe3ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=19108 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83c0ebe3ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=19108 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=endpoint level=info msg="Successful endpoint creation" containerID=83c0ebe3ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=19108 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=daemon level=info msg="Delete endpoint request" containerID=83c0ebe3ad endpointID=662 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=83c0ebe3ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=19108 ipv4=10.0.0.111 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ba6025a6-a81b-4c43-9501-a22660bb3b81 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 78911637-c3d3-4290-b131-3404f59e8c0f default }" containerID=fe03feae0b4ad757d99626584f01218cf57acd6c74c3c54f4db5ae9d8ebbfd04 datapathConfiguration="&{false false false false false }" interface=lxc18f16899515b k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe03feae0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe03feae0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe03feae0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=42520 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe03feae0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1419 identity=42520 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe03feae0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1419 identity=42520 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe03feae0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1419 identity=42520 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034567884534743736 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.10 18115ecf-01bf-41d5-9cb7-c40b796e2de5 default }" containerID=8fef7d8b574e853f82bd87f107bf0845a33b14428f4bf3e46687786227abeb09 datapathConfiguration="&{false false false false false }" interface=lxc7a0223d21986 k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fef7d8b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fef7d8b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fef7d8b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=55409 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fef7d8b57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1819 identity=55409 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 0ed69439-a4cf-43e9-9395-59eb9974d928 default }" containerID=fab9f92ec39ed017d33b4e663d1ddfe992b989b5ce20f4903759f86e522aa848 datapathConfiguration="&{false false false false false }" interface=lxc1cc1decd8806 k8sPodName=openstack/barbican-db-init-hkjph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fab9f92ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fab9f92ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fab9f92ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=52827 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fab9f92ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1038 identity=52827 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fef7d8b57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1819 identity=55409 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fef7d8b57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1819 identity=55409 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/barbican-api-68d9c9d4bb-6927d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fab9f92ec3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1038 identity=52827 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=endpoint level=info msg="Successful endpoint creation" containerID=fab9f92ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=52827 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fab9f92ec3 endpointID=1038 k8sNamespace=openstack k8sPodName=barbican-db-init-hkjph subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=603ccca7-cc47-40fe-a49d-4b96c23f4d1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fab9f92ec3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1038 identity=52827 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/barbican-db-init-hkjph subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 cc88e33c-d19d-42a6-969c-3194f2c2e02e default }" containerID=32a7b987b89cc47c59bc347e8110d43da35619e7ac30e1f56008bd4e0f02a66e datapathConfiguration="&{false false false false false }" interface=lxc4d178de75630 k8sPodName=openstack/barbican-db-sync-xxbq2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32a7b987b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32a7b987b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=57772864-6167-4b06-98aa-358e32663d49,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=57772864-6167-4b06-98aa-358e32663d49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=57772864-6167-4b06-98aa-358e32663d49;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=57772864-6167-4b06-98aa-358e32663d49;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32a7b987b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=35923 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=57772864-6167-4b06-98aa-358e32663d49,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=57772864-6167-4b06-98aa-358e32663d49,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32a7b987b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1094 identity=35923 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=32a7b987b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1094 identity=35923 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=32a7b987b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=35923 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=daemon level=info msg="Delete endpoint request" containerID=32a7b987b8 endpointID=1094 k8sNamespace=openstack k8sPodName=barbican-db-sync-xxbq2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=57772864-6167-4b06-98aa-358e32663d49 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=57772864-6167-4b06-98aa-358e32663d49 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=32a7b987b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1094 identity=35923 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-xxbq2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 c8f590ce-6957-4d0b-8f22-dac5b7007685 default }" containerID=05f819bbf2f2380734340f32447d2a7266b8a5b741625cc6447345c808c64a3e datapathConfiguration="&{false false false false false }" interface=lxc2018036f7e0a k8sPodName=openstack/barbican-rabbit-init-cxq8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05f819bbf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05f819bbf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=05f819bbf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=8398 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05f819bbf2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=852 identity=8398 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=05f819bbf2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=852 identity=8398 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=05f819bbf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=8398 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=05f819bbf2 endpointID=852 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-cxq8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b96ec32d-050a-495d-a1f4-30ae0d0d46fa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=05f819bbf2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=852 identity=8398 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-rabbit-init-cxq8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 bba13893-894f-4a9c-8354-4246956462e7 default }" containerID=416d5ca546dc8dd1d949b7e1aa400116fb2f9e6f8b099af773993b8b8e4422e1 datapathConfiguration="&{false false false false false }" interface=lxc5392739784e5 k8sPodName=openstack/barbican-ks-service-trgwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=416d5ca546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=416d5ca546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=416d5ca546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=17523 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=416d5ca546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=68 identity=17523 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=416d5ca546 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=68 identity=17523 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=416d5ca546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=17523 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=daemon level=info msg="Delete endpoint request" containerID=416d5ca546 endpointID=68 k8sNamespace=openstack k8sPodName=barbican-ks-service-trgwm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=317c8626-d3a0-4c01-a9d2-129fbd78bb6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=416d5ca546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=68 identity=17523 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/barbican-ks-service-trgwm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 9d7a6088-d56f-4c4f-8fdb-1600293fc5b0 default }" containerID=504f0dc0d60a812895ce0aebce1a5650f96122fa4de7678fa2d795f443dda855 datapathConfiguration="&{false false false false false }" interface=lxc82d8a56b5b84 k8sPodName=openstack/barbican-ks-endpoints-rjkw7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=504f0dc0d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=504f0dc0d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7f80285-99b5-4465-82b9-617c13361fae,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f7f80285-99b5-4465-82b9-617c13361fae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=f7f80285-99b5-4465-82b9-617c13361fae;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=f7f80285-99b5-4465-82b9-617c13361fae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=504f0dc0d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=30078 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=f7f80285-99b5-4465-82b9-617c13361fae,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=f7f80285-99b5-4465-82b9-617c13361fae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=504f0dc0d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=30078 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=504f0dc0d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2087 identity=30078 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=504f0dc0d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2087 identity=30078 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=504f0dc0d6 endpointID=2087 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-rjkw7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=f7f80285-99b5-4465-82b9-617c13361fae k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=f7f80285-99b5-4465-82b9-617c13361fae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=504f0dc0d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2087 identity=30078 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/barbican-ks-endpoints-rjkw7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 4695a92b-e997-43c9-a150-24d3faa6117d default }" containerID=62b6c630c025520eb046706ac37e58a46beb9fba3eabb991725ee6371aaacca5 datapathConfiguration="&{false false false false false }" interface=lxc0cb020e118fb k8sPodName=openstack/barbican-ks-user-mfgr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62b6c630c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62b6c630c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62b6c630c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=8697 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62b6c630c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=8697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62b6c630c0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=69 identity=8697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=62b6c630c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=69 identity=8697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62b6c630c0 endpointID=69 k8sNamespace=openstack k8sPodName=barbican-ks-user-mfgr7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=568b91d7-16ce-4de0-8fb5-3caf0a37fae5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=62b6c630c0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=69 identity=8697 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/barbican-ks-user-mfgr7 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.144 da75e663-f7c2-4d1e-9617-78a155827fba default }" containerID=b207c3e76099156ada0af2b0d1653ac53903c877e8b12d82b804ac6433435df2 datapathConfiguration="&{false false false false false }" interface=lxcfc29bc38e085 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b207c3e760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b207c3e760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b207c3e760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=25613 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b207c3e760 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=25613 ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b207c3e760 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1456 identity=25613 ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b207c3e760 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1456 identity=25613 ipv4=10.0.0.144 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-xc62b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 51d8f2b3-360f-47cb-96f4-8751397eaf1c default }" containerID=18689f3398e987bdf8ed6f81befff1937061eb5a792f351197ab5d946dce612d datapathConfiguration="&{false false false false false }" interface=lxc3ae6bf1c0bce k8sPodName=openstack/rook-ceph-detect-version-5nxvp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18689f3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18689f3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18689f3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=349 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=18689f3398 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3215 identity=349 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18689f3398 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3215 identity=349 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=endpoint level=info msg="Successful endpoint creation" containerID=18689f3398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3215 identity=349 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=18689f3398 endpointID=3215 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-5nxvp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=e13e7f12-97c9-4b09-aefa-c6e1b8b08a45 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=18689f3398 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3215 identity=349 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/rook-ceph-detect-version-5nxvp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 089d5ae0-70c4-4ec0-9127-ee8a5740b0e9 default }" containerID=514a39cfed17f88412ae3d7c7e5ef82131b9910d7694f3466f3aa7ebb08f16a3 datapathConfiguration="&{false false false false false }" interface=lxc92403e7cb4dc k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=26634 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=26634 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=514a39cfed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=26634 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=endpoint level=info msg="Successful endpoint creation" containerID=514a39cfed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=26634 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=514a39cfed endpointID=194 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-mwwzh subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b5df5701-6d19-4237-8947-5f9aaab5a417 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=514a39cfed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=26634 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-mwwzh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 3ea6e84e-e70c-4acb-adfb-0b42a319aa61 default }" containerID=9b17eec40b097a3eb5ab25d37e376ab6a1b549f2da5b609f0e743e3e3994fcbd datapathConfiguration="&{false false false false false }" interface=lxc61f3eb1f4a07 k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b17eec40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b17eec40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b17eec40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=19108 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b17eec40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=19108 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b17eec40b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2218 identity=19108 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b17eec40b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=19108 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=daemon level=info msg="Delete endpoint request" containerID=9b17eec40b endpointID=2218 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9b17eec40b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2218 identity=19108 ipv4=10.0.0.213 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-49163b05-040b-4e35-8bac-e9b459797dff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 bd2e3d70-2c1f-4e7b-b97b-e4a5eaa0dd33 default }" containerID=81a049d2c997fa727530b8baaa030652ebe8c61d84c3fe62533602390936d340 datapathConfiguration="&{false false false false false }" interface=lxc8ee1d3f7fab0 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=11639 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3375 identity=11639 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=81a049d2c9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3375 identity=11639 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=81a049d2c9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3375 identity=11639 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.245 e143f2e9-8049-486e-8e4b-edbb940d4586 default }" containerID=d736247b12a4d5b035b4c9c86449265acddb776b506b80a8b596e2a69a13772c datapathConfiguration="&{false false false false false }" interface=lxc4179f32c3dfc k8sPodName=openstack/glance-db-init-5knc8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d736247b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d736247b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d736247b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=55637 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d736247b12 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=55637 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d736247b12 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1238 identity=55637 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d736247b12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1238 identity=55637 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d736247b12 endpointID=1238 k8sNamespace=openstack k8sPodName=glance-db-init-5knc8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=60602f8c-1868-43dd-92a3-62189c2c219b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d736247b12 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1238 identity=55637 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/glance-db-init-5knc8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 03446691-c7c9-46f9-84f7-51afb517c681 default }" containerID=24e8f4fbcd48a91a1d2af8be161075233f0fdf682da6ba5af1145ca74c2c9d7b datapathConfiguration="&{false false false false false }" interface=lxcf5e755de7774 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24e8f4fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24e8f4fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24e8f4fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=26800 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24e8f4fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=26800 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 3aad9233-5077-4b98-884c-9f414179fcc2 default }" containerID=d8b7b045e45b34213d9a6761658ee97041383f0ead95dc495581e9c3821247cd datapathConfiguration="&{false false false false false }" interface=lxc54f3babff520 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d8b7b045e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d8b7b045e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d8b7b045e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=19614 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d8b7b045e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3483 identity=19614 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24e8f4fbcd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=26800 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb subsys=endpoint level=info msg="Successful endpoint creation" containerID=24e8f4fbcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=26800 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-jrflb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d8b7b045e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3483 identity=19614 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=d8b7b045e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3483 identity=19614 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9fl7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 785604ed-55b0-471a-bf6c-310fca66cf58 default }" containerID=ec4559e46fc7826b74ad417b5ba0df1cae8199f0807bba27e312a1f03a065720 datapathConfiguration="&{false false false false false }" interface=lxcf80ac3709aaa k8sPodName=openstack/glance-db-sync-knzv4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec4559e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec4559e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec4559e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=6067 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec4559e46f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3236 identity=6067 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec4559e46f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3236 identity=6067 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec4559e46f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=6067 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec4559e46f endpointID=3236 k8sNamespace=openstack k8sPodName=glance-db-sync-knzv4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=14c07cd7-2072-4f5b-8bc9-990e94507f02 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ec4559e46f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3236 identity=6067 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/glance-db-sync-knzv4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 a9ea2042-f510-4780-9e4d-9e8b11581318 default }" containerID=e7ec1f3f7e9767abcf900fc5f602f4ee199a336510ff833fe6079e79a39e0035 datapathConfiguration="&{false false false false false }" interface=lxc23b7386df3c8 k8sPodName=openstack/glance-rabbit-init-bx6r8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=65025 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3530 identity=65025 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7ec1f3f7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3530 identity=65025 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7ec1f3f7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=65025 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7ec1f3f7e endpointID=3530 k8sNamespace=openstack k8sPodName=glance-rabbit-init-bx6r8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=139066c3-d78c-4626-a4cb-8a675ad5f2ec k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e7ec1f3f7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3530 identity=65025 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/glance-rabbit-init-bx6r8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 7c172a13-72b5-4033-aad9-c364749ec9d3 default }" containerID=1b0770f8efc6a502969c9102879907dd4617c7205d2e8e96312ab61dbe21bf21 datapathConfiguration="&{false false false false false }" interface=lxccf28ebede93c k8sPodName=openstack/glance-ks-service-kgcxr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=4443 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2075 identity=4443 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1b0770f8ef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2075 identity=4443 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b0770f8ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=4443 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1b0770f8ef endpointID=2075 k8sNamespace=openstack k8sPodName=glance-ks-service-kgcxr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=c97ae391-ab89-435e-9abe-242cdbfadd5a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=1b0770f8ef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2075 identity=4443 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/glance-ks-service-kgcxr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 97348a5e-36fa-4388-baa9-003715c31433 default }" containerID=ba1aa134c2071fd883311e0037b6a632ba3bc7d40a050641d81d8864ca1b525d datapathConfiguration="&{false false false false false }" interface=lxca498a1929386 k8sPodName=openstack/glance-ks-endpoints-7qh2s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba1aa134c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba1aa134c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba1aa134c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=21783 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba1aa134c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=21783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ba1aa134c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=135 identity=21783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba1aa134c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=21783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba1aa134c2 endpointID=135 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-7qh2s subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2cb3f9f8-2634-4e8b-b1f5-ed93852bec4e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ba1aa134c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=135 identity=21783 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/glance-ks-endpoints-7qh2s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 fd0c1e26-ab40-45e4-8046-ace1849ad78f default }" containerID=5b8d88d54411248c96db01147e039181d6bb74488b6249b717d15a7a76e729da datapathConfiguration="&{false false false false false }" interface=lxc335eb3a9170c k8sPodName=openstack/glance-ks-user-rrp5r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73b324f1-e493-4555-9766-e76e27366883,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=73b324f1-e493-4555-9766-e76e27366883,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=73b324f1-e493-4555-9766-e76e27366883;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=73b324f1-e493-4555-9766-e76e27366883;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=62312 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=73b324f1-e493-4555-9766-e76e27366883,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=73b324f1-e493-4555-9766-e76e27366883,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=476 identity=62312 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b8d88d544 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=476 identity=62312 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b8d88d544 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=62312 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5b8d88d544 endpointID=476 k8sNamespace=openstack k8sPodName=glance-ks-user-rrp5r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=73b324f1-e493-4555-9766-e76e27366883 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=73b324f1-e493-4555-9766-e76e27366883 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=5b8d88d544 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=476 identity=62312 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/glance-ks-user-rrp5r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 dbcae5ce-78a0-4a46-942b-826b223f6fab default }" containerID=ff5f7c20faeb3b5cba548a8f5d1ea609e91c2d77c803e3c58213c0714e4c2b9e datapathConfiguration="&{false false false false false }" interface=lxc8fb980221c4c k8sPodName=openstack/glance-metadefs-load-ppt96 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff5f7c20fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff5f7c20fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff5f7c20fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=33183 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff5f7c20fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=33183 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff5f7c20fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=874 identity=33183 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff5f7c20fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=33183 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=daemon level=info msg="Delete endpoint request" containerID=ff5f7c20fa endpointID=874 k8sNamespace=openstack k8sPodName=glance-metadefs-load-ppt96 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=a79d7c63-a3b5-4bd9-b48d-460199866f19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ff5f7c20fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=33183 ipv4=10.0.0.202 ipv6= k8sPodName=openstack/glance-metadefs-load-ppt96 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 b555e0f3-333e-49dd-8dec-fca415362de7 default }" containerID=dbcb8095a79922a5581f6ec3d7a28a0e6c7e733404d492c1564f06e77498a09f datapathConfiguration="&{false false false false false }" interface=lxcbacb227ff8f9 k8sPodName=openstack/glance-storage-init-qqlln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbcb8095a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbcb8095a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbcb8095a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=56807 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dbcb8095a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2411 identity=56807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbcb8095a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2411 identity=56807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbcb8095a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2411 identity=56807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=daemon level=info msg="Delete endpoint request" containerID=dbcb8095a7 endpointID=2411 k8sNamespace=openstack k8sPodName=glance-storage-init-qqlln subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=ab68b9ed-dc2a-4b84-b639-09eb3d60026d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dbcb8095a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2411 identity=56807 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-storage-init-qqlln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 e3a01257-7ef5-400c-b1b8-a33ade03d6bf default }" containerID=be30bb6e6d08b416b6e5315838a3e6b613e759a98754a58ad78fadbda8f6291a datapathConfiguration="&{false false false false false }" interface=lxc0b03dc79aa53 k8sPodName=openstack/glance-api-8fc795489-46q2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3666 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3666 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3666 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3666 identity=19368 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3666 identity=19368 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be30bb6e6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3666 identity=19368 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=be30bb6e6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3666 identity=19368 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/glance-api-8fc795489-46q2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 cd52da42-3669-4a77-b05b-3a431cd0a59d default }" containerID=bb62dc3a0bed17325f736f06b9815e213a654d30b2d8533cd9240b8717041910 datapathConfiguration="&{false false false false false }" interface=lxc3bc3636f5105 k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb62dc3a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb62dc3a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.61 14e1f02d-dba8-487f-adc9-edb098941c16 default }" containerID=51d3b4590b516bd10b8bb075ce0a28fa2e9891b80f2e6f0787f2630c93b6148a datapathConfiguration="&{false false false false false }" interface=lxc7cd155c33e71 k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb62dc3a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=45715 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb62dc3a0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=45715 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=31933 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3029 identity=31933 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 cab90043-1756-4ee1-a935-06043669c0c6 default }" containerID=cea39f7cab38e7b7d1fbae8757a407a9252d4bd0eec51de9120677c1a5ee8d0d datapathConfiguration="&{false false false false false }" interface=lxc2b7bd32f2f65 k8sPodName=openstack/staffeln-db-init-m46kh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cea39f7cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cea39f7cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cea39f7cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=61652 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cea39f7cab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1182 identity=61652 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb62dc3a0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3922 identity=45715 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb62dc3a0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3922 identity=45715 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/staffeln-conductor-5469c7b5-pjx2x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=51d3b4590b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3029 identity=31933 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl subsys=endpoint level=info msg="Successful endpoint creation" containerID=51d3b4590b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3029 identity=31933 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/staffeln-api-77f95b66c4-4k4nl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cea39f7cab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1182 identity=61652 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=endpoint level=info msg="Successful endpoint creation" containerID=cea39f7cab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1182 identity=61652 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cea39f7cab endpointID=1182 k8sNamespace=openstack k8sPodName=staffeln-db-init-m46kh subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=a9a61fa4-20f8-4b1c-9202-848d59f2c57a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=cea39f7cab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1182 identity=61652 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/staffeln-db-init-m46kh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 a7e4d5fe-2bc1-4a3c-8abb-387abd167f86 default }" containerID=feb49d61734a1b62b10cec5c3fb30a2347f7e6891826c33a0bea0db74d1f8cf6 datapathConfiguration="&{false false false false false }" interface=lxc368b5f020749 k8sPodName=openstack/staffeln-db-sync-6qmgm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feb49d6173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feb49d6173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feb49d6173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=6902 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2f70282c-54d0-4197-9298-2c5bb4cbe0a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feb49d6173 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=6902 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feb49d6173 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=518 identity=6902 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm subsys=endpoint level=info msg="Successful endpoint creation" containerID=feb49d6173 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=518 identity=6902 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/staffeln-db-sync-6qmgm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager