level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.01412ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="91.732µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.097353ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.87µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=94.189721ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.821µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.38µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="49.531µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="71.981µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="63.402µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="434.099µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.52µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.364258ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.786167ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="29.75µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.85µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="213.784µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="82.002µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="66.382µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.700628ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="62.661µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.468447ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.411µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.083109ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.819773ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.65µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="30.431µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.17µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="40.46µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="424.088µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="5.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="13.27µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="465.769µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.104722ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.552161ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.23µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="31.211µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.167" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.167}] 10.0.0.0/24 [] [] 10.0.0.203 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35947" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.410157648s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.59µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="5.98µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="33.97µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.5µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=804 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.450818854s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=295.109355ms file-path=/var/run/cilium/state/templates/1918b29cdbd50bcb5ece6679d98f5b6fba2ae17e5fd155642922f496d5c4ccb7/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=804 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identityLabels="reserved:health" ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=898 identity=4 identityLabels="reserved:health" ipv4=10.0.0.203 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.039633386s file-path=/var/run/cilium/state/templates/77f5f57fd3e8b447c9e55b0b95f1b806167d08fd34ca5946c8e48029fe4bbf44/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=898 identity=4 ipv4=10.0.0.203 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 82833e80-0b03-4691-a28a-263a33698eef default }" containerID=b936ead9ec14cc41780992bdb0c18d02458781bcedafb16232cc4d44ee02b563 datapathConfiguration="&{false false false false false }" interface=lxcf6caae648e1d k8sPodName=kube-system/coredns-7c96b6546b-2fkdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.195 fa0a6e50-e761-451c-b254-6f880338052a default }" containerID=8dd41fdb9dca425a0c09ab6c863caed2d0a00442e7ddc74c5a3011931633a5b9 datapathConfiguration="&{false false false false false }" interface=lxce3c5747c3d8d k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=34120 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=34120 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=36434 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=36434 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8dd41fdb9d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2176 identity=36434 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dd41fdb9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2176 identity=36434 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b936ead9ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1272 identity=34120 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b936ead9ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1272 identity=34120 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8dd41fdb9d endpointID=2176 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4vb2v subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=9cca1dba-bb2e-476d-ae45-ef0c505c9bc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=8dd41fdb9d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2176 identity=36434 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4vb2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 8143bc06-2c5d-4828-a08a-43625d00ad38 default }" containerID=99d3734d4948086da4522a455941af247e4cdfd325de0d6f4c7461df2f2454e5 datapathConfiguration="&{false false false false false }" interface=lxc538c8ee349a4 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=63122 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=867 identity=63122 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=99d3734d49 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=867 identity=63122 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=99d3734d49 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=867 identity=63122 ipv4=10.0.0.233 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-hrt6t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=804 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00804 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00804 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00804 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00804:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=804 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 2696e729-0678-41f8-8d85-4b619101fd6a default }" containerID=afcbdd4cb69f7236a312b99611cb40bf5b7f68291977dad0f970364d001ce562 datapathConfiguration="&{false false false false false }" interface=lxcd8c154912e2c k8sPodName=kube-system/coredns-67659f764b-7qwhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afcbdd4cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afcbdd4cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=afcbdd4cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=34120 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afcbdd4cb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2449 identity=34120 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.187 bb4b858e-ca19-445b-abff-510032680cc3 default }" containerID=653c01328efaf35e0b569e5c4918b7336e6649151306a6f6419b58a574ec939a datapathConfiguration="&{false false false false false }" interface=lxc52b5b239514a k8sPodName=kube-system/coredns-67659f764b-j52nn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=653c01328e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=653c01328e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=653c01328e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=34120 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=653c01328e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2280 identity=34120 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afcbdd4cb6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2449 identity=34120 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=afcbdd4cb6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2449 identity=34120 ipv4=10.0.0.5 ipv6= k8sPodName=kube-system/coredns-67659f764b-7qwhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=653c01328e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2280 identity=34120 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn subsys=endpoint level=info msg="Successful endpoint creation" containerID=653c01328e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2280 identity=34120 ipv4=10.0.0.187 ipv6= k8sPodName=kube-system/coredns-67659f764b-j52nn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 3c89e868-5908-4c80-b18e-ce86f0ebe09d default }" containerID=8c473e46eeb47434ac715483284e2331277aac42cf971ec5596c1fe257121b25 datapathConfiguration="&{false false false false false }" interface=lxc257e76a84ee4 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c473e46ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c473e46ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=8c473e46ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=54806 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c473e46ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2399 identity=54806 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c473e46ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2399 identity=54806 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c473e46ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2399 identity=54806 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-dxtgc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b936ead9ec endpointID=1272 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2fkdj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=b936ead9ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1272 identity=34120 ipv4=10.0.0.43 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2fkdj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 9086c48c-5906-4133-850d-9e443b567d67 default }" containerID=713134c0e7f1a5fa3b367836b9691bf21d889555d07c49c0514dc1ff21fca594 datapathConfiguration="&{false false false false false }" interface=lxccee7b5c1b2a9 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=316 identity=46359 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=316 identity=46359 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 eed4c639-f853-4a84-81c1-8d23d99d71d3 default }" containerID=23a013126e04cda3075a8907815e560749160bd806c04b5705e544f1eb560eb6 datapathConfiguration="&{false false false false false }" interface=lxcd6286d660578 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23a013126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23a013126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.70 0ead2db2-d94a-42a8-897d-835921dc034e default }" containerID=5658bb92c4a7e43ca6cdabf8a46629c562bde0f00091fb0ef47c7ea398194f7c datapathConfiguration="&{false false false false false }" interface=lxc5a002d3fe01b k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5658bb92c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5658bb92c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23a013126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=15143 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=23a013126e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=15143 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5658bb92c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=7526 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5658bb92c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=438 identity=7526 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=713134c0e7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=316 identity=46359 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv subsys=endpoint level=info msg="Successful endpoint creation" containerID=713134c0e7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=316 identity=46359 ipv4=10.0.0.169 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-bz5hv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5658bb92c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=438 identity=7526 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5658bb92c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=438 identity=7526 ipv4=10.0.0.70 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-6dgnv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23a013126e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1087 identity=15143 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp subsys=endpoint level=info msg="Successful endpoint creation" containerID=23a013126e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1087 identity=15143 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ssgqp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.202 144c7a3d-07e8-4892-bd4a-04fc361f0d81 default }" containerID=7622767035a6f570ae000340720445ee042bb0cfb978044ba479f649692a1827 datapathConfiguration="&{false false false false false }" interface=lxc3abbea102af6 k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7622767035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7622767035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7622767035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=39614 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7622767035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1058 identity=39614 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7622767035 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1058 identity=39614 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7622767035 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1058 identity=39614 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7622767035 endpointID=1058 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-xgt97 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=f893e596-14e2-4d34-a8c3-935e7208a7e4 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7622767035 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1058 identity=39614 ipv4=10.0.0.202 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-xgt97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 d57e634d-d679-4b10-a3cc-bb795b2ddd13 default }" containerID=4e14f3d0ef31f89947bb9116bcb120e31346c4f771a88b4b7402cc674b337fe3 datapathConfiguration="&{false false false false false }" interface=lxc0e7fd9338f07 k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e14f3d0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e14f3d0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e14f3d0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=43089 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e14f3d0ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1147 identity=43089 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4e14f3d0ef datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1147 identity=43089 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e14f3d0ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1147 identity=43089 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e14f3d0ef endpointID=1147 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-g95dd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=10a06997-0f3c-4504-8ac8-a6106fe23e1a k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=4e14f3d0ef datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1147 identity=43089 ipv4=10.0.0.148 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-g95dd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 6bc66715-5f6a-4e5d-b917-c845e7ceac1d default }" containerID=e441dcae4d25c2fd5be9970b33021e35c85364bfd95a95524095ff21e9f02c40 datapathConfiguration="&{false false false false false }" interface=lxcee7e6f290755 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=22661 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=265 identity=22661 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e441dcae4d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=265 identity=22661 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l subsys=endpoint level=info msg="Successful endpoint creation" containerID=e441dcae4d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=265 identity=22661 ipv4=10.0.0.95 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-g882l subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 394087ec-0bbc-4803-805f-5708b0961875 default }" containerID=25c1e964bcd1df28c3750e0d3e2d17d3bacb1293b01324afe378119253553287 datapathConfiguration="&{false false false false false }" interface=lxc6ca8641eea71 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25c1e964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25c1e964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25c1e964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=2862 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25c1e964bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1898 identity=2862 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25c1e964bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1898 identity=2862 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=endpoint level=info msg="Successful endpoint creation" containerID=25c1e964bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1898 identity=2862 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=25c1e964bc endpointID=1898 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-fnkwg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=25b23e2f-1a67-4389-9a25-070da56c397b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=25c1e964bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1898 identity=2862 ipv4=10.0.0.159 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-fnkwg subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=068299d7-e078-4453-bb13-561b53073994] Description:}]" policyAddRequest=41b5c23c-310d-4b44-a38b-7a0bc7bb6368 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=41b5c23c-310d-4b44-a38b-7a0bc7bb6368 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=9df0e2fc-78dc-4b83-9a36-e45654877792] Description:}]" policyAddRequest=88a5e583-cfcb-4ea0-b6d8-7ccbb7de0d3f subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=88a5e583-cfcb-4ea0-b6d8-7ccbb7de0d3f policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 97bdf477-43cc-4bce-8d43-c58ead2dcda6 default }" containerID=b4312a2c751a77b907b0ce477d06f62aa4b03456c473db2b69798320b33ac724 datapathConfiguration="&{false false false false false }" interface=lxc8a29524482b2 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4312a2c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4312a2c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b4312a2c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=59131 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4312a2c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2012 identity=59131 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 0283d410-621d-459f-a2cd-2d95655224c1 default }" containerID=28c1bf6aac4c32cfdc9c41b5e35f13fababf538eb0a9e4b48f3fe05167a22b37 datapathConfiguration="&{false false false false false }" interface=lxcafd628412545 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=28c1bf6aac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=28c1bf6aac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28c1bf6aac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identity=22715 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28c1bf6aac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identity=22715 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4312a2c75 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2012 identity=59131 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4312a2c75 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2012 identity=59131 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-4bg8p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=28c1bf6aac datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3362 identity=22715 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd subsys=endpoint level=info msg="Successful endpoint creation" containerID=28c1bf6aac datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3362 identity=22715 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-xzbrd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 169fa38e-140a-4a5c-9105-3f1ff8331599 default }" containerID=0c34ca8a7392c16e483b70b15d53a1e82c3770528abbd22e6d47a0f604c0af00 datapathConfiguration="&{false false false false false }" interface=lxc83586c7beb23 k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=2029 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3181 identity=2029 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c34ca8a73 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3181 identity=2029 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c34ca8a73 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3181 identity=2029 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-vzlz8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.243 86787c25-4c57-4469-99ca-ab99a0898784 default }" containerID=8fdcc194477054ab394e1b4c489ff4b02ece4e545e635e56dcf8732e9b344d6d datapathConfiguration="&{false false false false false }" interface=lxc545032f197ee k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=280 identity=45028 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fdcc19447 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=280 identity=45028 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fdcc19447 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=280 identity=45028 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 600e58ed-b30a-40e6-8835-c5601b023ef0 default }" containerID=b25ab57ed01566f0ca747d960120bb7e445ddca4a02906ca927c036131968e4e datapathConfiguration="&{false false false false false }" interface=lxcf45bf8c0c73d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b25ab57ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b25ab57ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b25ab57ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=14576 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b25ab57ed0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3368 identity=14576 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b25ab57ed0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3368 identity=14576 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b25ab57ed0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3368 identity=14576 ipv4=10.0.0.242 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8fdcc19447 endpointID=280 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8fdcc19447 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=280 identity=45028 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-103c265d-2b93-47d8-b0d9-522846a753c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 41c1e673-8af3-4e17-b019-0d979f910e49 default }" containerID=5747d63b8ee7a40c457833db610cd71c6bc6a6a44e5be3575e701d4bba6717a1 datapathConfiguration="&{false false false false false }" interface=lxc29cf7f0c7b92 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5747d63b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5747d63b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5747d63b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=26443 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5747d63b8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2947 identity=26443 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5747d63b8e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2947 identity=26443 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5747d63b8e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2947 identity=26443 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=15d64af2-4ccb-448b-851e-d86dd8fdc941] Description:}]" policyAddRequest=444648c7-29bd-4a0b-bc6f-f90db9ee87b5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=444648c7-29bd-4a0b-bc6f-f90db9ee87b5 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.54 f5b9d1bf-80c7-4749-8a30-5f2dcb08495d default }" containerID=c8f854ca2c53a044e2d1ac6cc615173166bc4ab7521f4da2b977b70631c357b5 datapathConfiguration="&{false false false false false }" interface=lxcaaee2083ba39 k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8f854ca2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8f854ca2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8f854ca2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8f854ca2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1034 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8f854ca2c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1034 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8f854ca2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1034 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=daemon level=info msg="Delete endpoint request" containerID=c8f854ca2c endpointID=1034 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c8f854ca2c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1034 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-229c4b52-4570-4caa-b512-8e95d28fde3f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 e0069cc0-9228-4819-8360-4dbae2e9dcf3 default }" containerID=27e9a5727abeba6e34dfae73e300da604829cb16bf07268b1cf9b4794f1d348d datapathConfiguration="&{false false false false false }" interface=lxca4486f870a5b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27e9a5727a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27e9a5727a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27e9a5727a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=18898 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27e9a5727a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=53 identity=18898 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=27e9a5727a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=53 identity=18898 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=27e9a5727a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=53 identity=18898 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=18adfa50-ff99-4b3e-8df3-1c9340539600] Description:}]" policyAddRequest=fc6acb3c-d1d1-4a0c-8316-98ac0ceb07a5 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=fc6acb3c-d1d1-4a0c-8316-98ac0ceb07a5 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.59 0f1a53c9-a9dd-45db-b408-2bad667332d9 default }" containerID=d966facf642015c299b031b69d6e366c9a85723203a9db13af258febf87177ff datapathConfiguration="&{false false false false false }" interface=lxc0e111804dd6c k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d966facf64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d966facf64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d966facf64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=64045 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d966facf64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=200 identity=64045 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d966facf64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=200 identity=64045 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d966facf64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=200 identity=64045 ipv4=10.0.0.59 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009691993453000933 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.238 a8162e3e-c38a-4d4f-b7a6-cd348c2ea7b1 default }" containerID=73a25b1aff1a93a86a62fb6e5ac32dd81a0a81c89972c43ac5fd6ee42d72d4e5 datapathConfiguration="&{false false false false false }" interface=lxcd0e0fc457790 k8sPodName=monitoring/node-feature-discovery-worker-pwv8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73a25b1aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73a25b1aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73a25b1aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=23935 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=73a25b1aff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=23935 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73a25b1aff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3601 identity=23935 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=73a25b1aff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3601 identity=23935 ipv4=10.0.0.238 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-pwv8r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.67 41cb028c-c21a-4584-b708-14d25ceec09a default }" containerID=feac4ae2fa5921e180c1dbd4cb2b2dc1e8be373d4595591157fb2048126452cb datapathConfiguration="&{false false false false false }" interface=lxc83f99ccc4494 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=feac4ae2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=feac4ae2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=feac4ae2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identity=932 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=feac4ae2fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1692 identity=932 ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 6329779b-8ab6-4236-bf6c-3dd5fa4ecd8f default }" containerID=c0f2005e0d9ef0acd8a18ebe381e503bcbd1668ed3a6a2691721581abab59cfa datapathConfiguration="&{false false false false false }" interface=lxc7082b2f81757 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0f2005e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0f2005e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0f2005e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=57509 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0f2005e0d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2104 identity=57509 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=feac4ae2fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1692 identity=932 ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j subsys=endpoint level=info msg="Successful endpoint creation" containerID=feac4ae2fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1692 identity=932 ipv4=10.0.0.67 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-vvz9j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 23c017da-c7b9-4107-a063-a34a80f60963 default }" containerID=697379673742e839a573d75bea58ae48954a66abad35422424a5d46bc4aaef36 datapathConfiguration="&{false false false false false }" interface=lxcb7db7535fc00 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6973796737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6973796737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6973796737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=16622 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6973796737 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=16622 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0f2005e0d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2104 identity=57509 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0f2005e0d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2104 identity=57509 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-wntcw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6973796737 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=84 identity=16622 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6973796737 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=84 identity=16622 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-5sxrk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00804 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00804 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00804 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00804:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=804 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 ef3870f5-f3d4-4a45-bd95-944ca2271b14 default }" containerID=da4e28c0077534556e5559cfbff6adc773445a901568887fdc12f49d587b094b datapathConfiguration="&{false false false false false }" interface=lxc31d5ee47dac5 k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b4ce554e-100c-425c-8852-50663eceead9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b4ce554e-100c-425c-8852-50663eceead9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b4ce554e-100c-425c-8852-50663eceead9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b4ce554e-100c-425c-8852-50663eceead9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=2725 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=b4ce554e-100c-425c-8852-50663eceead9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b4ce554e-100c-425c-8852-50663eceead9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1154 identity=2725 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=da4e28c007 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1154 identity=2725 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=endpoint level=info msg="Successful endpoint creation" containerID=da4e28c007 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=2725 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da4e28c007 endpointID=1154 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-9lh6x subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b4ce554e-100c-425c-8852-50663eceead9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b4ce554e-100c-425c-8852-50663eceead9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=da4e28c007 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1154 identity=2725 ipv4=10.0.0.110 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-9lh6x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 484170c3-0165-47cc-ac9e-574a5a9363a4 default }" containerID=e51a11ebc0e3e5957df0f7459b1091b5dc192c9a782a276afcdc970c73bd0e6c datapathConfiguration="&{false false false false false }" interface=lxc8d9be91f432b k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=40579 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3033 identity=40579 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e51a11ebc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3033 identity=40579 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e51a11ebc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3033 identity=40579 ipv4=10.0.0.79 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-p4rlg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 2feee8b4-d222-4eec-b564-dd2cf0c6de84 default }" containerID=5d9dd31ac1b558acd294900d9a4870f8355cc374b187e7e8b03306fa8d46f384 datapathConfiguration="&{false false false false false }" interface=lxc5d16d01b3149 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d9dd31ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d9dd31ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.170 9f940a2d-2441-4143-aff3-5afb7b013d1b default }" containerID=08073ab4ed78e3099e6eb7267c2dd1701a396f040d210b82413bb1b80707d402 datapathConfiguration="&{false false false false false }" interface=lxc1b8545fdedbf k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08073ab4ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08073ab4ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d9dd31ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identity=2381 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d9dd31ac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2750 identity=2381 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08073ab4ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=20381 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08073ab4ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=874 identity=20381 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d9dd31ac1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2750 identity=2381 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d9dd31ac1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2750 identity=2381 ipv4=10.0.0.88 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-5cc88 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08073ab4ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=874 identity=20381 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj subsys=endpoint level=info msg="Successful endpoint creation" containerID=08073ab4ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=874 identity=20381 ipv4=10.0.0.170 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-dcf7965bd-qlrxj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 f7780cfd-fa0c-4796-a5eb-633b3f3ae122 default }" containerID=e0190f1e64d430837b580397de62b40ed133044d62c46180b26931dcc7a6001b datapathConfiguration="&{false false false false false }" interface=lxc8b922c18a851 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0190f1e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0190f1e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0190f1e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=4704 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0190f1e64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=4704 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0190f1e64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1756 identity=4704 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0190f1e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1756 identity=4704 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 eefa6334-2ced-43d6-926a-25e53c1e8842 default }" containerID=e7bc8a8b9b1c65b83b412f6f1d69efe4634a1789d06705dbfdde8bf92434c65f datapathConfiguration="&{false false false false false }" interface=lxc88e6ec82459b k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7bc8a8b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7bc8a8b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7bc8a8b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7bc8a8b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identity=45028 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7bc8a8b9b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=797 identity=45028 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7bc8a8b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=797 identity=45028 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 ce9b3500-9d6b-4669-804c-7f371f23d52c default }" containerID=d6d8e3a9bb38301b3904a2da4651b240d97e853533df6de83e277e236523002f datapathConfiguration="&{false false false false false }" interface=lxc4df795719466 k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6d8e3a9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6d8e3a9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d6d8e3a9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6d8e3a9bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=45028 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6d8e3a9bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=45028 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6d8e3a9bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=45028 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=daemon level=info msg="Delete endpoint request" containerID=e0190f1e64 endpointID=1756 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-9j8m7 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=2fdd4148-61ae-46a6-85ed-71fe515d2044 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e0190f1e64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1756 identity=4704 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-9j8m7 subsys=endpoint level=info msg="Delete endpoint request" containerID=e7bc8a8b9b endpointID=797 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e7bc8a8b9b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=797 identity=45028 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c513cd15-3a6e-4964-962d-99797a9a4fa6 subsys=endpoint level=info msg="Delete endpoint request" containerID=d6d8e3a9bb endpointID=1173 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d6d8e3a9bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=45028 ipv4=10.0.0.152 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dee0b755-2679-42bd-aa29-7b5dbfefb466 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 4ca3c0fc-85cf-45b8-9040-c183d9617aab default }" containerID=87461eef85140f17dbca247fccecd2cfd30728448fcc24645497ebb233f3dbec datapathConfiguration="&{false false false false false }" interface=lxcdf9e55e6250f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=16090 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=16090 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=87461eef85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=21 identity=16090 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=87461eef85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=21 identity=16090 ipv4=10.0.0.220 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 6069fbdd-d45f-436f-acfc-a79dc6667ba9 default }" containerID=96a23c0533bc7a190876e46030340cc87d63852e6e768a5ec75317d692acc2e5 datapathConfiguration="&{false false false false false }" interface=lxc5f5dbb27e2a9 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96a23c0533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96a23c0533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96a23c0533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=32694 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96a23c0533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1793 identity=32694 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96a23c0533 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1793 identity=32694 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=96a23c0533 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1793 identity=32694 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.53 50951ad7-9da0-49bd-8120-8d04190857d8 default }" containerID=44b8182a22ff9f4c52bbf508e608ec62dd16dadca7ac4b2f61011eeb76df1f78 datapathConfiguration="&{false false false false false }" interface=lxc3c74337f9134 k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44b8182a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44b8182a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44b8182a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=10715 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44b8182a22 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1829 identity=10715 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.190 cb28551b-ddff-4d71-9298-4eb24d6fdea6 default }" containerID=b2bfe0ea4a130ee4181997546a6566b0b3a5ed3bba54e0d90bbbca7b1ab3765c datapathConfiguration="&{false false false false false }" interface=lxcf2be2a1c9700 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2bfe0ea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2bfe0ea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.89 014b620d-6ac6-4146-8b22-1baa2ef52cad default }" containerID=6f559ebeb68e69cf0cd09a53bb8fcb733dbd65f26363580879efc6c8eef2bb94 datapathConfiguration="&{false false false false false }" interface=lxcdcb87598b3e3 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f559ebeb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f559ebeb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2bfe0ea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=46267 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2bfe0ea4a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1041 identity=46267 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f559ebeb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=4165 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f559ebeb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=4165 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44b8182a22 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1829 identity=10715 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf subsys=endpoint level=info msg="Successful endpoint creation" containerID=44b8182a22 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1829 identity=10715 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-tv8qf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b2bfe0ea4a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1041 identity=46267 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2bfe0ea4a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1041 identity=46267 ipv4=10.0.0.190 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6f559ebeb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1606 identity=4165 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f559ebeb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=4165 ipv4=10.0.0.89 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 aad22bd2-a797-4be7-80e5-857fbd347010 default }" containerID=351479b9f6547e9d065b1143dfb6a65584c908263e001d34a96ed40b10037aab datapathConfiguration="&{false false false false false }" interface=lxc219180010ba6 k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=351479b9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=351479b9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=351479b9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=351479b9f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identity=45028 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=351479b9f6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2650 identity=45028 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=351479b9f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2650 identity=45028 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 8b00f7b1-94db-4ace-957e-7f1753d5a4d0 default }" containerID=994740c70b5c3e767fe910f423f625e72ec85714eaf246a2bffafd1dc43fb8a7 datapathConfiguration="&{false false false false false }" interface=lxc2aaa0c45d6b9 k8sPodName=monitoring/vector-qqvzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=994740c70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=994740c70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=994740c70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=14024 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=994740c70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1238 identity=14024 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=994740c70b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1238 identity=14024 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=994740c70b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1238 identity=14024 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/vector-qqvzn subsys=daemon level=info msg="Delete endpoint request" containerID=351479b9f6 endpointID=2650 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=351479b9f6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2650 identity=45028 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-451c3b0c-0500-4cb5-b666-fd2c4782dcb9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 d4ebdc80-869d-43d6-bc6b-59f5fe59f5b8 default }" containerID=fe32b212f722fd26d3f3eb47b862f5be4953fe6cd040e9047e5ddd30e035f5f2 datapathConfiguration="&{false false false false false }" interface=lxc632671cb2771 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe32b212f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe32b212f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe32b212f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=32680 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe32b212f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=41 identity=32680 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fe32b212f7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=41 identity=32680 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe32b212f7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=41 identity=32680 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 57eb6c2a-1e1c-4246-abbb-547b123aa5a9 default }" containerID=1329678a0a4c39ee00d93df5c7f77903446c5466df0484922637c0f36fcbb239 datapathConfiguration="&{false false false false false }" interface=lxc9d671d045c1f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1329678a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1329678a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1329678a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=20174 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1329678a0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=20174 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1329678a0a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=20174 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1329678a0a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=20174 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-vj8x9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 e9dd0b80-ea79-4280-8a6d-996a1e9ac352 default }" containerID=a1114246b5ae07b1a2147fe968edc965002d3f248c6cf1285f7d73f50c652520 datapathConfiguration="&{false false false false false }" interface=lxc9f6276330c18 k8sPodName=openstack/memcached-memcached-6479589586-79dg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=49473 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=62 identity=49473 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a1114246b5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=62 identity=49473 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1114246b5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=62 identity=49473 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-79dg6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 d880cc64-da18-453b-9044-cfcf5c8393f7 default }" containerID=d48485365bfb67d38b79dd77a7a56ffcc92a85c60d2f6e11b00392bd4eef0530 datapathConfiguration="&{false false false false false }" interface=lxcb2891cf388b3 k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d48485365b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d48485365b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d48485365b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d48485365b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d48485365b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2421 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d48485365b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2421 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=daemon level=info msg="Delete endpoint request" containerID=d48485365b endpointID=2421 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d48485365b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2421 identity=45028 ipv4=10.0.0.54 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b95c1ce4-327f-4334-b717-483d1b2e5014 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 8bb0a842-b5bc-4599-9b55-0e20ef9e58b2 default }" containerID=b960503f311f090537667b9878f3161d13c655607467dea1d9e0dfc59d3f0d21 datapathConfiguration="&{false false false false false }" interface=lxcde028e04ebb2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b960503f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b960503f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b960503f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=17489 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b960503f31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=252 identity=17489 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b960503f31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=252 identity=17489 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b960503f31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=252 identity=17489 ipv4=10.0.0.194 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.106 b07bb7f4-432c-417e-8dcf-1a2e68f41f3f default }" containerID=0cf1e42716620fd538c485e1c954a6eb0499ddd518cf2314a42de904b40bb414 datapathConfiguration="&{false false false false false }" interface=lxc1853541c6d2c k8sPodName=openstack/keystone-api-866544fd5f-g74dv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cf1e42716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cf1e42716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0cf1e42716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=32158 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cf1e42716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=32158 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 7053835b-52f5-44ca-bc32-8c8237687713 default }" containerID=6cf4b7ecd310d3ef9ccf20045f78fa9b6371a34b8ab71707f2a242073e9ffb95 datapathConfiguration="&{false false false false false }" interface=lxc638027003404 k8sPodName=openstack/keystone-credential-setup-dt8qx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cf4b7ecd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cf4b7ecd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cf4b7ecd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=38133 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6cf4b7ecd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=38133 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cf1e42716 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3090 identity=32158 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cf1e42716 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3090 identity=32158 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/keystone-api-866544fd5f-g74dv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6cf4b7ecd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2464 identity=38133 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cf4b7ecd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2464 identity=38133 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cf4b7ecd3 endpointID=2464 k8sNamespace=openstack k8sPodName=keystone-credential-setup-dt8qx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e4c44fe5-cf21-4642-afc7-5a842fd3dd4d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6cf4b7ecd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2464 identity=38133 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-credential-setup-dt8qx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 006cb5f6-5ed3-496e-8c33-4cc916d02ba7 default }" containerID=3523fc5956698246f34320e8dc6cfe09d20ef2edb14545fc6da95da372f31ea4 datapathConfiguration="&{false false false false false }" interface=lxc5644f864bb89 k8sPodName=openstack/keystone-db-init-zhblr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3523fc5956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3523fc5956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=df590610-126f-4320-9a23-b3907cca91a1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=df590610-126f-4320-9a23-b3907cca91a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=df590610-126f-4320-9a23-b3907cca91a1;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=df590610-126f-4320-9a23-b3907cca91a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3523fc5956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=59069 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=df590610-126f-4320-9a23-b3907cca91a1,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=df590610-126f-4320-9a23-b3907cca91a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3523fc5956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1288 identity=59069 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3523fc5956 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1288 identity=59069 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=endpoint level=info msg="Successful endpoint creation" containerID=3523fc5956 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=59069 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3523fc5956 endpointID=1288 k8sNamespace=openstack k8sPodName=keystone-db-init-zhblr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=df590610-126f-4320-9a23-b3907cca91a1 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=df590610-126f-4320-9a23-b3907cca91a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3523fc5956 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1288 identity=59069 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-zhblr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 2ca419a6-72f5-43bb-aabe-84612bc7d780 default }" containerID=5718232b45acd4d171724a64eba02108219a00ddcbfed5d53f107a458aee7e55 datapathConfiguration="&{false false false false false }" interface=lxc6dafa4435e45 k8sPodName=openstack/keystone-fernet-setup-ctxth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5718232b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5718232b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5718232b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=22636 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5718232b45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1139 identity=22636 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5718232b45 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1139 identity=22636 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=endpoint level=info msg="Successful endpoint creation" containerID=5718232b45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1139 identity=22636 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5718232b45 endpointID=1139 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-ctxth subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=ac9c22e8-86fb-46aa-af1b-c329f59fb153 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5718232b45 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1139 identity=22636 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-fernet-setup-ctxth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 a9122520-4882-4926-9005-75d8db36de64 default }" containerID=0bd721dd0e774117c33f2a4ce162b90e8a62f39831724eb87a9f34165fc81163 datapathConfiguration="&{false false false false false }" interface=lxcb1b26d677864 k8sPodName=openstack/keystone-db-sync-kkkf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0bd721dd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0bd721dd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0bd721dd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=20794 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0bd721dd0e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1131 identity=20794 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0bd721dd0e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1131 identity=20794 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0bd721dd0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1131 identity=20794 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=daemon level=info msg="Delete endpoint request" containerID=0bd721dd0e endpointID=1131 k8sNamespace=openstack k8sPodName=keystone-db-sync-kkkf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=96ec95e7-1c43-4f86-9557-338ff8cc5e28 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0bd721dd0e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1131 identity=20794 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-sync-kkkf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 0cb1714b-c9f3-41fd-a807-5ac42107d7c8 default }" containerID=4a891e836af67cb08f52ef358d4dde992b0292a17877d801de3f8dcaa03b7769 datapathConfiguration="&{false false false false false }" interface=lxc2919c80d14bd k8sPodName=openstack/keystone-rabbit-init-mxw4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=4668 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2156 identity=4668 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a891e836a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2156 identity=4668 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a891e836a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=4668 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4a891e836a endpointID=2156 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mxw4z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ecc5d34d-aca6-472d-b640-e791c07e1130 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4a891e836a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2156 identity=4668 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/keystone-rabbit-init-mxw4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.98 3792ffeb-dddf-4491-a144-8751694f4671 default }" containerID=b8ded28911b883c59215923a67a51576654b8c35e1af567c147862ed2d0dca95 datapathConfiguration="&{false false false false false }" interface=lxc63098b65c6ef k8sPodName=openstack/keystone-domain-manage-4n5pt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8ded28911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8ded28911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8ded28911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=3978 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8ded28911 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=3978 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8ded28911 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=3978 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8ded28911 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=3978 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8ded28911 endpointID=905 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4n5pt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=73fe3cd7-dccf-4808-ab65-218052c00cca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b8ded28911 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=3978 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/keystone-domain-manage-4n5pt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 1f4d3ba5-4e27-43b9-b345-877c43b19703 default }" containerID=8433810d9fde5b392ce81d9b3023dde7b188391ef07c62d07b34140e0beec6d4 datapathConfiguration="&{false false false false false }" interface=lxc2507faa7b3f5 k8sPodName=openstack/keystone-bootstrap-phzq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8433810d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8433810d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8433810d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identity=11205 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8433810d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4007 identity=11205 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8433810d9f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4007 identity=11205 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8433810d9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4007 identity=11205 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8433810d9f endpointID=4007 k8sNamespace=openstack k8sPodName=keystone-bootstrap-phzq4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=0e8fc8bc-37ff-416f-88ca-023807f0b26f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8433810d9f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4007 identity=11205 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-bootstrap-phzq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 9e13ea9b-d21d-4100-bcd2-6d71aa461a55 default }" containerID=edf43c6a4b2c18c86aff2dda3f09b71e446f7616aacee44e176b5912454e2e7b datapathConfiguration="&{false false false false false }" interface=lxc6ba4c1be99fe k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edf43c6a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edf43c6a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edf43c6a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=edf43c6a4b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1332 identity=45028 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edf43c6a4b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1332 identity=45028 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edf43c6a4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=45028 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=daemon level=info msg="Delete endpoint request" containerID=edf43c6a4b endpointID=1332 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=edf43c6a4b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1332 identity=45028 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ddb98b8f-f9f0-4468-9bf7-419cc12afa94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.54 15d9b574-3e8d-455f-a9c7-c958acbd259e default }" containerID=9c97fe0ecdb60d26591fffb837f270879ddd974016b1e64234a486b7465eb437 datapathConfiguration="&{false false false false false }" interface=lxcbe47519c8866 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c97fe0ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c97fe0ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c97fe0ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=1485 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c97fe0ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1745 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9c97fe0ecd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1745 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c97fe0ecd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1745 identity=1485 ipv4=10.0.0.54 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.132 0b81c7fc-12f0-4f9c-9601-df64eda5c35b default }" containerID=84f87459ac338af4d6b734e0ae938c5854d85a9eb3d72c95953c797aadcb8ac0 datapathConfiguration="&{false false false false false }" interface=lxcef2f9f034902 k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=8908 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2576 identity=8908 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 1fd7e254-a2f4-4396-b1b0-50bd9a8717c8 default }" containerID=3c0627c7928836945db92432177c692d7fe6526ca3b9435d2763516c59f32ee7 datapathConfiguration="&{false false false false false }" interface=lxc9b4e44357d64 k8sPodName=openstack/barbican-db-init-8hbzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c0627c792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c0627c792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c0627c792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=27193 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c0627c792 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=38 identity=27193 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=84f87459ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2576 identity=8908 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc subsys=endpoint level=info msg="Successful endpoint creation" containerID=84f87459ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2576 identity=8908 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/barbican-api-5bc78dccbf-sl5gc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c0627c792 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=38 identity=27193 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c0627c792 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=27193 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c0627c792 endpointID=38 k8sNamespace=openstack k8sPodName=barbican-db-init-8hbzg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=68a38a01-91e5-4ec6-8423-4a0761ecfb3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3c0627c792 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=38 identity=27193 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/barbican-db-init-8hbzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.8 bbf0c50d-bdcf-4b5a-8e4d-a58252b4f15c default }" containerID=d9229a7da40f315f05c222137508038b3b87a4efe804ff4baad9e4f23ec34860 datapathConfiguration="&{false false false false false }" interface=lxc0897d8eefcbf k8sPodName=openstack/barbican-db-sync-wzr4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9229a7da4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9229a7da4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0c6a376-2847-4c83-9086-3596a4863438,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b0c6a376-2847-4c83-9086-3596a4863438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b0c6a376-2847-4c83-9086-3596a4863438;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b0c6a376-2847-4c83-9086-3596a4863438;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9229a7da4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=38033 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b0c6a376-2847-4c83-9086-3596a4863438,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b0c6a376-2847-4c83-9086-3596a4863438,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9229a7da4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1020 identity=38033 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9229a7da4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1020 identity=38033 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9229a7da4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1020 identity=38033 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03607951086883006 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=d9229a7da4 endpointID=1020 k8sNamespace=openstack k8sPodName=barbican-db-sync-wzr4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b0c6a376-2847-4c83-9086-3596a4863438 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b0c6a376-2847-4c83-9086-3596a4863438 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d9229a7da4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1020 identity=38033 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/barbican-db-sync-wzr4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 7cc6b745-13eb-4be9-b9ae-ee093a090794 default }" containerID=e1fd9149f1bcf921c469b66a440cf073f6a1424a6e77c9d87ba595f52c8c1d80 datapathConfiguration="&{false false false false false }" interface=lxc42ab69a86486 k8sPodName=openstack/barbican-rabbit-init-4w5lz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1fd9149f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1fd9149f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1fd9149f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=15821 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1fd9149f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=719 identity=15821 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1fd9149f1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=719 identity=15821 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1fd9149f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=15821 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=daemon level=info msg="Delete endpoint request" containerID=e1fd9149f1 endpointID=719 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-4w5lz subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ab9f9d7c-677d-476e-accd-5d25882e1717 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e1fd9149f1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=719 identity=15821 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/barbican-rabbit-init-4w5lz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 164e2b28-ead5-4fc6-a767-28664765495d default }" containerID=eec858f15f5543f822473f0ef58e2e354c7f5cf91eff2925e16e83fd09095632 datapathConfiguration="&{false false false false false }" interface=lxc98a11a3eda25 k8sPodName=openstack/barbican-ks-service-v27sk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eec858f15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eec858f15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eec858f15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=31581 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eec858f15f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=632 identity=31581 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eec858f15f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=632 identity=31581 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=endpoint level=info msg="Successful endpoint creation" containerID=eec858f15f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=632 identity=31581 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=daemon level=info msg="Delete endpoint request" containerID=eec858f15f endpointID=632 k8sNamespace=openstack k8sPodName=barbican-ks-service-v27sk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=85ad82b9-7d4c-4550-9e97-3330e10a525a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eec858f15f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=632 identity=31581 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/barbican-ks-service-v27sk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.204 dd5bb3c1-d385-4f2e-ba61-a62ede4b0866 default }" containerID=93af0c982215aa7dd17a379fcad2f321c43b8254f60dd7cc8d1d2a258dea56b7 datapathConfiguration="&{false false false false false }" interface=lxce0f091cf9466 k8sPodName=openstack/barbican-ks-endpoints-4kskb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93af0c9822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93af0c9822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=93af0c9822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=10333 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93af0c9822 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=10333 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93af0c9822 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=71 identity=10333 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=endpoint level=info msg="Successful endpoint creation" containerID=93af0c9822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=71 identity=10333 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=93af0c9822 endpointID=71 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-4kskb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7114e553-1bf2-431b-befb-6d5ac0eb082a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=93af0c9822 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=71 identity=10333 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/barbican-ks-endpoints-4kskb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 4ed84c0f-2ba1-4d9e-b416-6e7b5af3ad8a default }" containerID=5be21a05f928ee1d76eae8de6fca1cbddbedd43d7b7994f58275ddfc69be4538 datapathConfiguration="&{false false false false false }" interface=lxcb29913af8235 k8sPodName=openstack/barbican-ks-user-zd5lp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5be21a05f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5be21a05f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5be21a05f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=21806 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5be21a05f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=21806 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5be21a05f9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3553 identity=21806 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5be21a05f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3553 identity=21806 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=daemon level=info msg="Delete endpoint request" containerID=5be21a05f9 endpointID=3553 k8sNamespace=openstack k8sPodName=barbican-ks-user-zd5lp subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=51e5304e-3bcc-46d4-af76-13ca0418f7a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=5be21a05f9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3553 identity=21806 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-user-zd5lp subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.74 258b78ca-5906-4231-8f37-828a61db910b default }" containerID=ab58998f17da585915c344436f415ed3a05a577793f09e8f0d8406a7a7d8c564 datapathConfiguration="&{false false false false false }" interface=lxc3af8d70cb086 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ab58998f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ab58998f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ab58998f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=54047 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ab58998f17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3237 identity=54047 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ab58998f17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3237 identity=54047 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=ab58998f17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3237 identity=54047 ipv4=10.0.0.74 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-bgr9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 8a999937-6747-48ee-8255-11fba1d10999 default }" containerID=cc5cb811f23cc9e4f81f5188612c65e52abdb9041953fba6c613f050364f52e2 datapathConfiguration="&{false false false false false }" interface=lxc389a4cd80bb4 k8sPodName=openstack/rook-ceph-detect-version-62gk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=44446f68-ede5-4575-867f-4a9993470cd5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=44446f68-ede5-4575-867f-4a9993470cd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=44446f68-ede5-4575-867f-4a9993470cd5;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=44446f68-ede5-4575-867f-4a9993470cd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=3243 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=44446f68-ede5-4575-867f-4a9993470cd5,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=44446f68-ede5-4575-867f-4a9993470cd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3561 identity=3243 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc5cb811f2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3561 identity=3243 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc5cb811f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3561 identity=3243 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc5cb811f2 endpointID=3561 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-62gk2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=44446f68-ede5-4575-867f-4a9993470cd5 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=44446f68-ede5-4575-867f-4a9993470cd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cc5cb811f2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3561 identity=3243 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/rook-ceph-detect-version-62gk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 fb546f1b-b4e1-4038-a3b6-e6ab5b87debc default }" containerID=863eca9fb9665e9e2d318cdda6263844b3ad3f0bef15b61dc9f1395002de8d6b datapathConfiguration="&{false false false false false }" interface=lxc16636570506b k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=863eca9fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=863eca9fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=863eca9fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=7604 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=863eca9fb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=487 identity=7604 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=863eca9fb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=487 identity=7604 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=endpoint level=info msg="Successful endpoint creation" containerID=863eca9fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=7604 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=863eca9fb9 endpointID=487 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-x6l98 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=b82944dc-158b-44c4-aa3b-c84215208e7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=863eca9fb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=487 identity=7604 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-x6l98 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 90bd3550-3563-4d53-870e-12c3fa88de1b default }" containerID=e12d406b6c0bc51e3cf1d949c8f77cecc3d4ff7c8c16052772c5083d36f57b77 datapathConfiguration="&{false false false false false }" interface=lxc33d9ddacb903 k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e12d406b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e12d406b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e12d406b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=45028 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e12d406b6c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2461 identity=45028 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e12d406b6c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2461 identity=45028 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e12d406b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=45028 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=daemon level=info msg="Delete endpoint request" containerID=e12d406b6c endpointID=2461 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=e12d406b6c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2461 identity=45028 ipv4=10.0.0.4 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9f7e6763-e907-4f63-b74b-367384023728 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.101 342d0c96-4b73-427c-998f-4992250a0755 default }" containerID=53bdd37d0b3bcf94b6a0f4a48a5362934c2d18db2ffc1368c9a41d80c287094a datapathConfiguration="&{false false false false false }" interface=lxc3d22df642853 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53bdd37d0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53bdd37d0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53bdd37d0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=24847 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=53bdd37d0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=24847 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53bdd37d0b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=105 identity=24847 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53bdd37d0b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=24847 ipv4=10.0.0.101 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 55b4c3ac-fd76-47c4-88c4-2c6a1877595b default }" containerID=9272e9e8e13bdb28e431d23375d95517e2a89db8a06ce790914d2ecfe97b6863 datapathConfiguration="&{false false false false false }" interface=lxc73a34a5eed84 k8sPodName=openstack/glance-db-init-85nxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9272e9e8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9272e9e8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9272e9e8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=547 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9272e9e8e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1389 identity=547 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9272e9e8e1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1389 identity=547 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=9272e9e8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=547 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=daemon level=info msg="Delete endpoint request" containerID=9272e9e8e1 endpointID=1389 k8sNamespace=openstack k8sPodName=glance-db-init-85nxn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=203b0848-ae3d-4bbc-950e-3438e4ac66ad k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=9272e9e8e1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1389 identity=547 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/glance-db-init-85nxn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 2d2a5294-43f2-4bf8-99e4-5f6edf43aa28 default }" containerID=f05374bdb90f2129f0ab0c99a2114b2fa872c8720687c5a298c4c560eaa76ff2 datapathConfiguration="&{false false false false false }" interface=lxc34e59efa6772 k8sPodName=openstack/glance-db-sync-fm894 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f05374bdb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f05374bdb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f05374bdb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=22689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f05374bdb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=22689 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f05374bdb9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1724 identity=22689 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f05374bdb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=22689 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 3386cd6b-0e51-448c-a111-e29b428deb1f default }" containerID=7a17c22099b09f5b5a34572424319ec46aeee64b464eb2d60961e7102796e1aa datapathConfiguration="&{false false false false false }" interface=lxc70136db6ff4a k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a17c22099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a17c22099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a17c22099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=40677 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a17c22099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=368 identity=40677 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 fd963646-b1c6-4616-b2af-8187b3ec264e default }" containerID=0c1c85b43cafb1bbb975a3a3bda49dc215024ac3fb96d1e3ddfd7926d356a5ec datapathConfiguration="&{false false false false false }" interface=lxc874d7eb09e9c k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c1c85b43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c1c85b43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0c1c85b43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=41864 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c1c85b43c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1549 identity=41864 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a17c22099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=368 identity=40677 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a17c22099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=368 identity=40677 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-df9tl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0c1c85b43c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1549 identity=41864 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c1c85b43c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1549 identity=41864 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-gqmvh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f05374bdb9 endpointID=1724 k8sNamespace=openstack k8sPodName=glance-db-sync-fm894 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=6a641b7b-2322-4cf4-b0d7-c348ceeaca90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f05374bdb9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1724 identity=22689 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-db-sync-fm894 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 a0482fc4-05af-4c67-9861-7d756d4a7902 default }" containerID=6c7304af1bb3f52a9edffad82b6a0dacd1034b968409ee9c4aea1bc05041da22 datapathConfiguration="&{false false false false false }" interface=lxca59c98290f6d k8sPodName=openstack/glance-rabbit-init-nhscr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c7304af1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c7304af1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c7304af1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=57089 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c7304af1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=57089 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c7304af1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=57089 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c7304af1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=57089 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6c7304af1b endpointID=1377 k8sNamespace=openstack k8sPodName=glance-rabbit-init-nhscr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=307f9994-b7af-4077-b937-6a2cc4bae72e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6c7304af1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=57089 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-rabbit-init-nhscr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.151 fbb369e5-095a-4c08-bc94-849f04b0633f default }" containerID=4f2af005344d5a1eec7389f9ad479951fb7d72a9f0c3015b19f6e7d90aac83e0 datapathConfiguration="&{false false false false false }" interface=lxc3803d2a61f1e k8sPodName=openstack/glance-ks-service-kvxfj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=40589 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1369 identity=40589 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f2af00534 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1369 identity=40589 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f2af00534 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1369 identity=40589 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4f2af00534 endpointID=1369 k8sNamespace=openstack k8sPodName=glance-ks-service-kvxfj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=a468b4c9-4de6-480c-9cea-f6f4572fc5bd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4f2af00534 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1369 identity=40589 ipv4=10.0.0.151 ipv6= k8sPodName=openstack/glance-ks-service-kvxfj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 8049981d-b25d-42b2-97cf-0ed6286e0d40 default }" containerID=d266cd222c5e88aa6f51f26a47806d9cbe747714d12b2ca7361463616965f0a8 datapathConfiguration="&{false false false false false }" interface=lxce08cab728b81 k8sPodName=openstack/glance-ks-endpoints-6l4fs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d266cd222c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d266cd222c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d266cd222c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1353 identity=50151 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d266cd222c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1353 identity=50151 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d266cd222c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1353 identity=50151 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=endpoint level=info msg="Successful endpoint creation" containerID=d266cd222c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=50151 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=daemon level=info msg="Delete endpoint request" containerID=d266cd222c endpointID=1353 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-6l4fs subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4e067335-1a46-47c2-a779-c0f74ff9a8af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d266cd222c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1353 identity=50151 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-6l4fs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 afbd980c-4329-43f6-90b9-d1994b0e60fb default }" containerID=3da533d2c2caa3b580a1a70d8cd455838785415f932e4f4f0351dd2b36f472bb datapathConfiguration="&{false false false false false }" interface=lxc16dcb37781dc k8sPodName=openstack/glance-ks-user-zdk94 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identity=51723 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2650 identity=51723 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3da533d2c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2650 identity=51723 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3da533d2c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2650 identity=51723 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3da533d2c2 endpointID=2650 k8sNamespace=openstack k8sPodName=glance-ks-user-zdk94 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=bedd8c8f-b5a2-4777-aa68-a988c0bffa12 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3da533d2c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2650 identity=51723 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/glance-ks-user-zdk94 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 c7d944b9-7837-4a1b-b9cb-422dee54b4a6 default }" containerID=6f46699596a9ee054289b116f6747d3b0daaee3f62cd1fb6875330c7dd8fab37 datapathConfiguration="&{false false false false false }" interface=lxce7a2f80c7f16 k8sPodName=openstack/glance-metadefs-load-g58v8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=2139 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=2139 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f46699596 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=2139 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f46699596 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=2139 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f46699596 endpointID=166 k8sNamespace=openstack k8sPodName=glance-metadefs-load-g58v8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=b9f7ac9a-515e-4711-866f-e9cddc8c4d33 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f46699596 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=2139 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-metadefs-load-g58v8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 a27de4bb-fc5a-4e42-af3c-182fdd9406f9 default }" containerID=a201ff77b268beb5ecbd4771cfdaaf23d92ed14fb8b392b640ed432a57934e29 datapathConfiguration="&{false false false false false }" interface=lxca781ddc776e3 k8sPodName=openstack/glance-storage-init-lgkbj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a201ff77b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a201ff77b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a92b1140-648c-4846-bad2-622367a69018,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a92b1140-648c-4846-bad2-622367a69018,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a92b1140-648c-4846-bad2-622367a69018;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a92b1140-648c-4846-bad2-622367a69018;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a201ff77b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=64740 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a92b1140-648c-4846-bad2-622367a69018,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a92b1140-648c-4846-bad2-622367a69018,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a201ff77b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3540 identity=64740 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a201ff77b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3540 identity=64740 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=endpoint level=info msg="Successful endpoint creation" containerID=a201ff77b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3540 identity=64740 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=daemon level=info msg="Delete endpoint request" containerID=a201ff77b2 endpointID=3540 k8sNamespace=openstack k8sPodName=glance-storage-init-lgkbj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a92b1140-648c-4846-bad2-622367a69018 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a92b1140-648c-4846-bad2-622367a69018 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a201ff77b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3540 identity=64740 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/glance-storage-init-lgkbj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 b4eff472-604e-43f7-bcf3-d2e327a9f34b default }" containerID=26dca41f051632f501104a253a475d8ce44ed8b2d88b242aa8e3c5dc14b6372d datapathConfiguration="&{false false false false false }" interface=lxc95efa8d7489a k8sPodName=openstack/glance-api-68cf5768d9-rg4sn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26dca41f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26dca41f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26dca41f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=7102 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26dca41f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2176 identity=7102 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=26dca41f05 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2176 identity=7102 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn subsys=endpoint level=info msg="Successful endpoint creation" containerID=26dca41f05 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2176 identity=7102 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-api-68cf5768d9-rg4sn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 84ace491-7af4-4b00-b63f-07d0e5a0989d default }" containerID=b5ce10fdd7f7817a21a868950dfb63376cb3e32322718b67e5ce1c94f5cfcc28 datapathConfiguration="&{false false false false false }" interface=lxc769342746560 k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b5ce10fdd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b5ce10fdd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b5ce10fdd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=31555 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b5ce10fdd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=31555 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.93 89bdacac-9dbd-48ba-87b2-0c3aadc85a19 default }" containerID=d9389fa99440b088ab5851277be45ee2c1d6c93ca32f6c954a0b66832b31ed53 datapathConfiguration="&{false false false false false }" interface=lxcb9bdff841c03 k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9389fa994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9389fa994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9389fa994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=2840 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d9389fa994 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3710 identity=2840 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b5ce10fdd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=31555 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq subsys=endpoint level=info msg="Successful endpoint creation" containerID=b5ce10fdd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=31555 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/staffeln-api-66fb874dbb-zhqnq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 2a2de009-54b0-4270-8fbf-ed2c4c007ad4 default }" containerID=ddd098a7cdca472d07f1973e8f27a3884eb5dafb100171fb5f587dcbf52af7ff datapathConfiguration="&{false false false false false }" interface=lxc74694f9739f4 k8sPodName=openstack/staffeln-db-init-98dgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ddd098a7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ddd098a7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ddd098a7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=9014 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ddd098a7cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=9014 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9389fa994 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3710 identity=2840 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9389fa994 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3710 identity=2840 ipv4=10.0.0.93 ipv6= k8sPodName=openstack/staffeln-conductor-868945bcf7-zqz2r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ddd098a7cd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=348 identity=9014 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ddd098a7cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=9014 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ddd098a7cd endpointID=348 k8sNamespace=openstack k8sPodName=staffeln-db-init-98dgj subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=86bf0e3a-a32c-4208-86f5-a4a5e47d39b6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=ddd098a7cd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=348 identity=9014 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/staffeln-db-init-98dgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 ce0abbf6-0e9f-406b-bf38-279916270ad6 default }" containerID=74d1c3ed409c9fac7b114e2f79c477d6159281eecb445754b8bd727bb3ed4636 datapathConfiguration="&{false false false false false }" interface=lxc1cf2c51e6ae1 k8sPodName=openstack/staffeln-db-sync-t6dbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74d1c3ed40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2933 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74d1c3ed40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2933 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74d1c3ed40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2933 identity=44520 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=b920a983-6cfb-4d3e-aa6f-ae2484b431b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74d1c3ed40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2933 identity=44520 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74d1c3ed40 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2933 identity=44520 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=74d1c3ed40 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2933 identity=44520 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/staffeln-db-sync-t6dbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager