level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.701502ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="71.182µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="804.465µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.13µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.524632ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.8µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="12.64µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="46.101µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="49.911µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="77.182µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="612.902µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.24µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=19.916116ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=4.583125ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="29.881µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="28.761µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="166.163µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="72.572µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="56.421µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=43.346596ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="144.643µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.62.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.793344ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.881µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.075122ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.62µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.96953ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.66µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="31.891µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.48µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="59.051µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="454.789µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.28µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="230.014µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="854.976µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.163033ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="6.46µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.55µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.62 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.62 ipAddr.ipv6="" k8sNodeIP=162.253.55.62 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.62" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.243" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.62" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.62} {CiliumInternalIP 10.0.0.243}] 10.0.0.0/24 [] [] 10.0.0.83 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37187" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.602649055s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="226.114µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="15.33µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="42.081µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="35.431µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.726170221s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=289.138658ms file-path=/var/run/cilium/state/templates/673b711d56eddde33fa5fffab6a25a88be6238e6ea052f2295b85c73cf86bdc4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=680 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identityLabels="reserved:health" ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2582 identity=4 identityLabels="reserved:health" ipv4=10.0.0.83 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.230 c48b52a4-5b23-445c-81e5-a7851eb7a87b default }" containerID=249675d9f98888b6a42ed502a39b531360e784fb4d4c63f215df949458e314cf datapathConfiguration="&{false false false false false }" interface=lxc9239a7220d7b k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=249675d9f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 401e6518-c9bd-418b-a782-ddb79d6aadf8 default }" containerID=bbefb87bac4c96c0229112fe3a4ce20388a83973b91104aaeabbc44dc344d7b6 datapathConfiguration="&{false false false false false }" interface=lxc1246a6af474f k8sPodName=kube-system/coredns-7c96b6546b-fm478 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=249675d9f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt subsys=endpoint level=info msg="New endpoint" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 7c9ac751-7d4d-44d2-8c71-b1cd88edaf7a default }" containerID=41255f15bee5189876ccf9b591798381e06b4a06f5f1cf8057385d02ccb2247f datapathConfiguration="&{false false false false false }" interface=lxc2f244a181952 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.159 86da2d76-4948-460f-b62a-fdc20cc8b67a default }" containerID=eaa8d9f9866d1b512e985de391c670da98bc1e9b81f87bfeac873485bccf0ee5 datapathConfiguration="&{false false false false false }" interface=lxcecc965773407 k8sPodName=kube-system/coredns-67659f764b-xt2rf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=249675d9f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=8502 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=249675d9f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2520 identity=8502 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=16018 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1104 identity=16018 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=2549 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=2549 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identity=16018 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1404 identity=16018 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.130437016s file-path=/var/run/cilium/state/templates/5842097ee6406d20e55fae86dc12275700c48731c87b053be1eb88b2d8f3ed42/bpf_lxc.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.14 34a346a4-86ee-4571-8a2d-722a5330276f default }" containerID=913395b3ac45a70c910af04d415843d3812a8a8f79e7091ee557d873a0b64685 datapathConfiguration="&{false false false false false }" interface=lxc459b97725569 k8sPodName=kube-system/coredns-67659f764b-jlc9x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=913395b3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=913395b3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 e03d9728-e7f1-4303-8918-cec726d8be2e default }" containerID=7cbfa80f6980856e1bd976e227d76cf3f367cd39a583b48190eac31413667415 datapathConfiguration="&{false false false false false }" interface=lxc81d41faf0a55 k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 labels="[]" subsys=daemon sync-build=true level=info msg="Identity of endpoint changed" containerID=913395b3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=16018 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x oldIdentity="no identity" subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 b2e87295-eb24-49ac-a230-f83930945861 default }" containerID=90df0e3faae13ae571eec3cd33feafb8ac1bd099f7baae39e2df49cf799149ef datapathConfiguration="&{false false false false false }" interface=lxcbe353cbff9da k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.223 bf6fbfa1-5968-41c2-b62e-492763047d66 default }" containerID=045ba0164d077e047e3ad1fa07e72f60524a357f43b857dcb474181ac268a4ae datapathConfiguration="&{false false false false false }" interface=lxcc333f6aff397 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90df0e3faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=913395b3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=257 identity=16018 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x subsys=endpoint level=info msg="New endpoint" containerID=045ba0164d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=045ba0164d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=90df0e3faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc subsys=endpoint level=info msg="New endpoint" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3784 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3784 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41255f15be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=26 identity=2549 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f subsys=endpoint level=info msg="Successful endpoint creation" containerID=41255f15be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=26 identity=2549 ipv4=10.0.0.89 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-vlk4f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2582 identity=4 ipv4=10.0.0.83 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=045ba0164d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=62029 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=045ba0164d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=62029 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=bbefb87bac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1104 identity=16018 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbefb87bac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1104 identity=16018 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=249675d9f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2520 identity=8502 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt subsys=endpoint level=info msg="Successful endpoint creation" containerID=249675d9f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2520 identity=8502 ipv4=10.0.0.230 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-9xxqt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=eaa8d9f986 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1404 identity=16018 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf subsys=endpoint level=info msg="Successful endpoint creation" containerID=eaa8d9f986 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1404 identity=16018 ipv4=10.0.0.159 ipv6= k8sPodName=kube-system/coredns-67659f764b-xt2rf subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=913395b3ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=257 identity=16018 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x subsys=endpoint level=info msg="Successful endpoint creation" containerID=913395b3ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=257 identity=16018 ipv4=10.0.0.14 ipv6= k8sPodName=kube-system/coredns-67659f764b-jlc9x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=045ba0164d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=824 identity=62029 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=045ba0164d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=824 identity=62029 ipv4=10.0.0.223 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-v2zn5 subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=90df0e3faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=55678 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc oldIdentity="no identity" subsys=endpoint level=info msg="Invalid state transition skipped" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3784 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=90df0e3faa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1053 identity=55678 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90df0e3faa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1053 identity=55678 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc subsys=endpoint level=info msg="Successful endpoint creation" containerID=90df0e3faa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1053 identity=55678 ipv4=10.0.0.53 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-tmnjc subsys=daemon level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3784 identity=30560 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3784 identity=30560 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cbfa80f69 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3784 identity=30560 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cbfa80f69 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3784 identity=30560 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bbefb87bac endpointID=1104 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fm478 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=bbefb87bac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1104 identity=16018 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fm478 subsys=endpoint level=info msg="Delete endpoint request" containerID=7cbfa80f69 endpointID=3784 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-88jm6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c7cfca0b-eac3-4ec2-a374-65f8b192979b k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=7cbfa80f69 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3784 identity=30560 ipv4=10.0.0.219 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-88jm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.157 19cb2f10-f84e-41ab-b207-043ee24081d7 default }" containerID=dd13617d8e28452042f922de2924d48e7215e7d8226f397ec7e1b16835946325 datapathConfiguration="&{false false false false false }" interface=lxc9990bdea0451 k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=10517 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2229 identity=10517 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dd13617d8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2229 identity=10517 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dd13617d8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2229 identity=10517 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dd13617d8e endpointID=2229 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-hj5z4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=05ac5a56-7349-49b0-b513-aa9af6e53cbc k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=dd13617d8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2229 identity=10517 ipv4=10.0.0.157 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hj5z4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 5f94cb0a-3d0d-4e0b-9f32-25e41953fbde default }" containerID=200dcd8702658553b5b31ff3d70ae196635289b767384cf2d01cf272e7ad94b8 datapathConfiguration="&{false false false false false }" interface=lxcbd55426585bb k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=200dcd8702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=200dcd8702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=200dcd8702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=7594 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=200dcd8702 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=7594 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=200dcd8702 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1011 identity=7594 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=200dcd8702 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1011 identity=7594 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2bnx9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.84 5967324c-565f-4eb3-b2ec-278e9f61ceda default }" containerID=2225a9755a4f056cfc171d991b43208f6741d0ab8ee0c785c73b69aebace713b datapathConfiguration="&{false false false false false }" interface=lxccdb52fc5af04 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2225a9755a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2225a9755a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2225a9755a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=35612 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2225a9755a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=834 identity=35612 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2225a9755a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=834 identity=35612 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=endpoint level=info msg="Successful endpoint creation" containerID=2225a9755a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=35612 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2225a9755a endpointID=834 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-sh94p subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=444c9ca9-1e1c-4391-a7e8-c05dd731b2d8 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2225a9755a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=834 identity=35612 ipv4=10.0.0.84 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-sh94p subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c2d53721-e79c-40c6-b9d9-5a50e82e1a64] Description:}]" policyAddRequest=f41022d8-884a-41a6-a8fd-d3aa218938a8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f41022d8-884a-41a6-a8fd-d3aa218938a8 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b284dba1-e695-47f7-8239-0a52e91f2032] Description:}]" policyAddRequest=2697f888-f96a-4012-94a1-261ba88eb6b0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2697f888-f96a-4012-94a1-261ba88eb6b0 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.164 c32ce6f4-dd3a-4f12-82c2-a8674b600c66 default }" containerID=3342f17e06659f208051ee062d46182a96140c1278b7cf77a217746005448927 datapathConfiguration="&{false false false false false }" interface=lxcf05ad74f48ba k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3342f17e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3342f17e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3342f17e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=42604 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3342f17e06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3381 identity=42604 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3342f17e06 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3381 identity=42604 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b subsys=endpoint level=info msg="Successful endpoint creation" containerID=3342f17e06 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3381 identity=42604 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-fjk9b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 53bdcd09-b61c-435d-a5a5-0be1fda0bfa3 default }" containerID=b3a7c21842d9cf29d4f40f465689a2478cbce3940fcd2b35699e947a7b6c46f7 datapathConfiguration="&{false false false false false }" interface=lxcf7ada560316a k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3a7c21842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3a7c21842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3a7c21842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=45642 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3a7c21842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1699 identity=45642 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3a7c21842 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1699 identity=45642 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3a7c21842 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1699 identity=45642 ipv4=10.0.0.23 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-64prj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 275c0b9a-ba35-4ddd-81bf-fba8f546529b default }" containerID=ecff2fbb502feddbff448d2cecbca0a429a5323d095ab5f3c170230f0c3ab056 datapathConfiguration="&{false false false false false }" interface=lxc154117fd4d51 k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=19869 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=19869 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecff2fbb50 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=860 identity=19869 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecff2fbb50 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=860 identity=19869 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-vgxtb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 56201e3f-df52-4acd-98af-6a4efb667a90 default }" containerID=ea1a4e89728ea5459eeead284f3e4c93d3e29d7549b06fcbb26be4cd8e15dc15 datapathConfiguration="&{false false false false false }" interface=lxc505bd2eb6935 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=42648 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=877 identity=42648 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea1a4e8972 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=877 identity=42648 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1a4e8972 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=877 identity=42648 ipv4=10.0.0.8 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 67b873bc-7bd8-440c-a8c6-244248c6165a default }" containerID=a2384b821226980c1c37ce33629303543ba394922023f7b4b12c16724075ae10 datapathConfiguration="&{false false false false false }" interface=lxc0978d2899c9a k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2384b8212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2384b8212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2384b8212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2384b8212 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3698 identity=3032 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2384b8212 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3698 identity=3032 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2384b8212 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3698 identity=3032 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2384b8212 endpointID=3698 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a2384b8212 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3698 identity=3032 ipv4=10.0.0.141 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1e9a2abd-e127-4e2e-9ee1-4204bf65803a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 5cf709ce-855a-4a7b-8355-206b2c54d6fd default }" containerID=7462faace89389ce1c4a462811fd6e35b229224fe33f3df735c14c6cf8107e90 datapathConfiguration="&{false false false false false }" interface=lxce9bebe219416 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7462faace8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7462faace8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7462faace8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=7816 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7462faace8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=230 identity=7816 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7462faace8 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=230 identity=7816 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7462faace8 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=230 identity=7816 ipv4=10.0.0.48 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=dca59b7d-f97e-4ccc-8905-7bc8ac45c1d3] Description:}]" policyAddRequest=a447fa7e-7dad-4529-a13b-88686b783f47 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a447fa7e-7dad-4529-a13b-88686b783f47 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.31 e54b4c4d-8bc4-4c60-bab5-508e89b86645 default }" containerID=bb01f83038d88132997f858733790d81859e1eab34d69c1fdb77f789d61e9da0 datapathConfiguration="&{false false false false false }" interface=lxc6aa098806810 k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb01f83038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb01f83038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb01f83038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb01f83038 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1340 identity=3032 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb01f83038 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1340 identity=3032 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb01f83038 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1340 identity=3032 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=daemon level=info msg="Delete endpoint request" containerID=bb01f83038 endpointID=1340 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=bb01f83038 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1340 identity=3032 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f5a29362-81a4-4a4d-a18d-cef101d20b7a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 864c01af-479d-46a3-b7c8-bef4d7d23357 default }" containerID=652be088e30b72816755c2a2c526e8054c050ec27ebd8c96d7f6f13337be0340 datapathConfiguration="&{false false false false false }" interface=lxc15fa6e56551b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=652be088e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=652be088e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=652be088e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=56610 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=652be088e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2908 identity=56610 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=652be088e3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2908 identity=56610 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=652be088e3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2908 identity=56610 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=64b97e7f-e03b-4f30-a53c-2ad3e459975d] Description:}]" policyAddRequest=08608107-4e26-450a-aad2-07aa8dc769af subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=08608107-4e26-450a-aad2-07aa8dc769af policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.58 549ac31e-6886-47dc-8772-9877e9f43580 default }" containerID=e4b00892bbc6b5b735889605b91a0c4a627c3e8711a2b18800379069d47029a6 datapathConfiguration="&{false false false false false }" interface=lxc3a58af869922 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4b00892bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4b00892bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4b00892bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=3101 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4b00892bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=3101 ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4b00892bb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=964 identity=3101 ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4b00892bb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=964 identity=3101 ipv4=10.0.0.58 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009759627740879516 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.22 c8614cb9-9eb3-4b7f-aaab-fe59e4be6e86 default }" containerID=2f3a73839bf40b80614f023bc85ac6a81e1b7f1897bb615f8889456776478421 datapathConfiguration="&{false false false false false }" interface=lxc7fc3c526ad34 k8sPodName=monitoring/node-feature-discovery-worker-sntt2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f3a73839b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f3a73839b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f3a73839b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=3755 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f3a73839b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3318 identity=3755 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 d7c158ce-380f-41d6-bd69-3f8ed03339ea default }" containerID=72941f5d648a1e14b30d19c60e77379d3d2fbe52462000874a576a8deb8fadb6 datapathConfiguration="&{false false false false false }" interface=lxce3268c619125 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72941f5d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72941f5d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72941f5d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=17853 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72941f5d64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3305 identity=17853 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f3a73839b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3318 identity=3755 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f3a73839b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3318 identity=3755 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-sntt2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.168 8a22d21c-a348-474f-bf45-a8aca4fbdabb default }" containerID=7956c69acba5c5ba76b8d16d1155cabf3e7da3f4ce254b8b3408a21f6329f532 datapathConfiguration="&{false false false false false }" interface=lxc384ee17387d1 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7956c69acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7956c69acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7956c69acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=34675 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7956c69acb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1646 identity=34675 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72941f5d64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3305 identity=17853 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj subsys=endpoint level=info msg="Successful endpoint creation" containerID=72941f5d64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3305 identity=17853 ipv4=10.0.0.200 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-pbdhj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.147 e642d1f7-24f7-45ea-85b6-be6d4cb8de1c default }" containerID=c593baffbe3606fdb8419474e7d2948b240e1b0066a1970e0a19b052ececd203 datapathConfiguration="&{false false false false false }" interface=lxcbf4672da291a k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c593baffbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c593baffbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c593baffbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=37779 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c593baffbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=37779 ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7956c69acb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1646 identity=34675 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg subsys=endpoint level=info msg="Successful endpoint creation" containerID=7956c69acb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1646 identity=34675 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-8g9sg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c593baffbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1996 identity=37779 ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c593baffbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1996 identity=37779 ipv4=10.0.0.147 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-x4hwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00680 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00680 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00680 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00680:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 148f5016-b281-4408-be38-13c155e58328 default }" containerID=cf7659d64d5e3ecab3c2b343c67a0c52b74ea100527396391773f4acc91a2107 datapathConfiguration="&{false false false false false }" interface=lxc88b6ee785b00 k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=547f1325-b995-4648-ac4d-00445768aac0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=547f1325-b995-4648-ac4d-00445768aac0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=547f1325-b995-4648-ac4d-00445768aac0;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=547f1325-b995-4648-ac4d-00445768aac0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=56853 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=547f1325-b995-4648-ac4d-00445768aac0,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=547f1325-b995-4648-ac4d-00445768aac0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=149 identity=56853 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cf7659d64d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=149 identity=56853 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cf7659d64d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=56853 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cf7659d64d endpointID=149 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-xvvzg subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=547f1325-b995-4648-ac4d-00445768aac0 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=547f1325-b995-4648-ac4d-00445768aac0 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=cf7659d64d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=149 identity=56853 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-xvvzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 feb54f63-f8ab-40d0-a3d7-33789012e8cf default }" containerID=52373f035ca713c8d03eaaeaa46c14fbb928bf14bd96d6a38aead8cddb9056bc datapathConfiguration="&{false false false false false }" interface=lxc57926e2d5531 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=52373f035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=52373f035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=52373f035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=42805 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=52373f035c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1854 identity=42805 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 5c26ecbe-f29a-423b-81ca-95cb1ce27252 default }" containerID=c1cf7166c5a84f6b3321639e4a8012eebbac01a72602236e04aa0d7b9a85c279 datapathConfiguration="&{false false false false false }" interface=lxc94a604b7beef k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1cf7166c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1cf7166c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.127 2b0fcd31-f3c7-41a2-9816-9d12d4f47c6a default }" containerID=02c8a2dbc46199fc28618c902ec35c36b7fb4be88e9d50c52b23356febe0042d datapathConfiguration="&{false false false false false }" interface=lxcd2b3446286ab k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=02c8a2dbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=02c8a2dbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1cf7166c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=30486 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1cf7166c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1090 identity=30486 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=02c8a2dbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=47010 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=02c8a2dbc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=47010 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=52373f035c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1854 identity=42805 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x subsys=endpoint level=info msg="Successful endpoint creation" containerID=52373f035c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1854 identity=42805 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-x8x2x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c1cf7166c5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1090 identity=30486 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1cf7166c5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1090 identity=30486 ipv4=10.0.0.94 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-cfc8h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=02c8a2dbc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3548 identity=47010 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h subsys=endpoint level=info msg="Successful endpoint creation" containerID=02c8a2dbc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3548 identity=47010 ipv4=10.0.0.127 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-84b6bc5fcc-zv97h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 fd618f66-15a0-459f-adc1-9c1c890c147d default }" containerID=0edaf985a30e929dacdc833333895e7df77246fbc369e2ac09b7599b37aed8d4 datapathConfiguration="&{false false false false false }" interface=lxcb65fadc8b2b5 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0edaf985a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0edaf985a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0edaf985a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identity=4737 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0edaf985a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3065 identity=4737 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0edaf985a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3065 identity=4737 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=0edaf985a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3065 identity=4737 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0edaf985a3 endpointID=3065 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-wp2lx subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=3c92bb75-055d-4dee-a686-6249321bc5eb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0edaf985a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3065 identity=4737 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-wp2lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 935592b5-a5f5-4768-8247-5f302f55da94 default }" containerID=1e019e5bc0b0e51f5fe56b6902c5abef247856f9ce33871de7106e06dae87d2f datapathConfiguration="&{false false false false false }" interface=lxccbecf3ac4c90 k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e019e5bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e019e5bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e019e5bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e019e5bc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2477 identity=3032 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e019e5bc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2477 identity=3032 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e019e5bc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2477 identity=3032 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 d6215daa-af69-4142-9c57-fe2bc50161af default }" containerID=1bd050b47916f1e60922964f4abc519a61d5499dd0ecb696d884699a692c4eee datapathConfiguration="&{false false false false false }" interface=lxc4eaa737c575f k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1bd050b479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1bd050b479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1bd050b479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1bd050b479 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=575 identity=3032 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1bd050b479 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=575 identity=3032 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=endpoint level=info msg="Successful endpoint creation" containerID=1bd050b479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=3032 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=daemon level=info msg="Delete endpoint request" containerID=1e019e5bc0 endpointID=2477 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=1bd050b479 endpointID=575 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1e019e5bc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2477 identity=3032 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5739be88-df7c-4082-8fa0-3e58c9879065 subsys=endpoint level=info msg="Removed endpoint" containerID=1bd050b479 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=575 identity=3032 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-425f334f-157e-484e-b5b5-7424001bbdcc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.217 f9d8cb59-58e2-4431-8765-3630c6f14dae default }" containerID=69c18c155df238e1a977e9b8d81196710fcc081deb593d3b881e12ff089fa769 datapathConfiguration="&{false false false false false }" interface=lxc05515978668a k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=45918 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=45918 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 bfa69c2c-b57c-4102-a465-d788240c0fae default }" containerID=cfde5c0167ca942d5b104de10d53e25aa182b5deaa810eaa7353f3324b8b69e6 datapathConfiguration="&{false false false false false }" interface=lxcdbf2f6b8134d k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cfde5c0167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cfde5c0167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cfde5c0167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=57721 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cfde5c0167 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=57721 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69c18c155d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2742 identity=45918 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc subsys=endpoint level=info msg="Successful endpoint creation" containerID=69c18c155d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2742 identity=45918 ipv4=10.0.0.217 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-xkqhc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 eb7ae66d-ccdb-4a9b-a064-c7c2c9469076 default }" containerID=a24af73ee2958604d7d34d8d70b2d488969f4712e49e8151bef0207378614c7a datapathConfiguration="&{false false false false false }" interface=lxc66dcb1d63994 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a24af73ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a24af73ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a24af73ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=37087 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a24af73ee2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=37087 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cfde5c0167 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1615 identity=57721 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cfde5c0167 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=57721 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a24af73ee2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=571 identity=37087 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a24af73ee2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=571 identity=37087 ipv4=10.0.0.246 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 383530bf-196c-4aab-82fc-186ae4495462 default }" containerID=72d76c8e9d982289ac2f3d7ace2dffcdd9fcc8c2408770c03fafe07d573d3b7f datapathConfiguration="&{false false false false false }" interface=lxcee5a15a420af k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72d76c8e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72d76c8e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72d76c8e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72d76c8e9d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=176 identity=3032 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72d76c8e9d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=176 identity=3032 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=endpoint level=info msg="Successful endpoint creation" containerID=72d76c8e9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=176 identity=3032 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 cba33e1d-a161-4633-be59-155f510aa2bf default }" containerID=7881892af17147d4a2037fa7894e37291dd5d7413b4e2975b931f8629dfb2911 datapathConfiguration="&{false false false false false }" interface=lxc9f87985bf433 k8sPodName=monitoring/vector-hrz6r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7881892af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7881892af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7881892af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=22850 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7881892af1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=82 identity=22850 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7881892af1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=82 identity=22850 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r subsys=endpoint level=info msg="Successful endpoint creation" containerID=7881892af1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=82 identity=22850 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/vector-hrz6r subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 50004201-a852-41a3-9608-e735b7b4e334 default }" containerID=4f716f3045afa8ad8c69fbf89065e9093bb1cbb62871eba0278250ccfde58cf6 datapathConfiguration="&{false false false false false }" interface=lxcc9f2e39c2422 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f716f3045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f716f3045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f716f3045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=20141 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f716f3045 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=20141 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 236790af-8142-4f00-b55e-74c6845d2f53 default }" containerID=35762214150ba97af01a7cc5182185b05a607c938e463e0314105f968e498aed datapathConfiguration="&{false false false false false }" interface=lxc1e61ea75b642 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3576221415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3576221415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=4f716f3045 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=717 identity=20141 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f716f3045 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=717 identity=20141 ipv4=10.0.0.25 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3576221415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=6832 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3576221415 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3807 identity=6832 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3576221415 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3807 identity=6832 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3576221415 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3807 identity=6832 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Delete endpoint request" containerID=72d76c8e9d endpointID=176 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=72d76c8e9d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=176 identity=3032 ipv4=10.0.0.118 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0894128f-b8cd-4472-a3e1-57812dbe74ef subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 ca4e2620-c07f-4cf9-90b0-e6672d95f8b2 default }" containerID=d0a3dbc1a61ebbe96bc0d6b59f9795a2e669ff1528a4b9a53f2bd33d6adf6c0f datapathConfiguration="&{false false false false false }" interface=lxce4a60a2fcaab k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0a3dbc1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0a3dbc1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0a3dbc1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=14013 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d0a3dbc1a6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=14013 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0a3dbc1a6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=666 identity=14013 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0a3dbc1a6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=666 identity=14013 ipv4=10.0.0.197 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.211 a5917988-36f8-4d52-a789-55b5dbdaaaf7 default }" containerID=f7e6aaf416a2df6a14274b058aacc2c92401bb21b0220d4e0bf87872f502a09b datapathConfiguration="&{false false false false false }" interface=lxc35f92d78570b k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7e6aaf416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7e6aaf416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f7e6aaf416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=13377 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7e6aaf416 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=623 identity=13377 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7e6aaf416 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=623 identity=13377 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7e6aaf416 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=623 identity=13377 ipv4=10.0.0.211 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-mbn8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 c3ab6aa4-8109-4ac5-bb80-b160f18a34ed default }" containerID=01832c0a6469c61a7aa87e0fe6fc62e59b6748299a02dd92343ab64ec84278cb datapathConfiguration="&{false false false false false }" interface=lxc15ea071b7377 k8sPodName=openstack/memcached-memcached-6479589586-pb7kj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=40255 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2221 identity=40255 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01832c0a64 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2221 identity=40255 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj subsys=endpoint level=info msg="Successful endpoint creation" containerID=01832c0a64 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2221 identity=40255 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-pb7kj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.77 e6860acf-edc1-4ffe-b6a2-17fcf308ba37 default }" containerID=2550dfc16a02308a4c3a133e89f003a33039506855573b0e29f594813d469385 datapathConfiguration="&{false false false false false }" interface=lxc6fadf8df2d1b k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2550dfc16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2550dfc16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2550dfc16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2550dfc16a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1153 identity=3032 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2550dfc16a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1153 identity=3032 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2550dfc16a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=3032 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=daemon level=info msg="Delete endpoint request" containerID=2550dfc16a endpointID=1153 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2550dfc16a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1153 identity=3032 ipv4=10.0.0.77 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71ac3abd-acbe-4bd1-9ac1-7e6e4177b8f1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 8bc83d0f-3173-4183-a0bf-560321f0837b default }" containerID=5d32f1b5d9d6d41a16138c32948d91d2a7cb2515c139fae1205ca76aa11ce16b datapathConfiguration="&{false false false false false }" interface=lxcd67e7fcc1a70 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=63188 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=63188 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d32f1b5d9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=258 identity=63188 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d32f1b5d9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=258 identity=63188 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 698337a9-40a7-4062-b306-72d1a303d6a9 default }" containerID=85c8b5bcfca97138428c071c305a1080950869a19f494ef3cb32958b75839d6f datapathConfiguration="&{false false false false false }" interface=lxc1310a716d255 k8sPodName=openstack/keystone-api-684df5498c-mvshv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=63360 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1988 identity=63360 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 00dcf91a-ae29-4b42-bcca-b05e71b95244 default }" containerID=081af1a06744680801f1163c8bae3929e33a1aba361fd06209dfeeae3d6700bc datapathConfiguration="&{false false false false false }" interface=lxc66b3edfb2bba k8sPodName=openstack/keystone-credential-setup-dp72w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=081af1a067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=081af1a067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=081af1a067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=7604 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=081af1a067 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1968 identity=7604 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85c8b5bcfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1988 identity=63360 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv subsys=endpoint level=info msg="Successful endpoint creation" containerID=85c8b5bcfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1988 identity=63360 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/keystone-api-684df5498c-mvshv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=081af1a067 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1968 identity=7604 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=endpoint level=info msg="Successful endpoint creation" containerID=081af1a067 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=7604 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=081af1a067 endpointID=1968 k8sNamespace=openstack k8sPodName=keystone-credential-setup-dp72w subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8b3f22e4-1fba-497a-b29a-860cd2ad9e4f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=081af1a067 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1968 identity=7604 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/keystone-credential-setup-dp72w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 d4b7cf53-ad54-44fe-8881-18f5b100fa63 default }" containerID=9bde3cff949a2a0a41dc469bcd2b711de59fdafa61947d283942032ecf453714 datapathConfiguration="&{false false false false false }" interface=lxc1dd57d4d4b47 k8sPodName=openstack/keystone-db-init-mrfvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bde3cff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bde3cff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8730a350-a761-4785-a6ed-0a5252caf399,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8730a350-a761-4785-a6ed-0a5252caf399,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8730a350-a761-4785-a6ed-0a5252caf399;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=8730a350-a761-4785-a6ed-0a5252caf399;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bde3cff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identity=55768 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8730a350-a761-4785-a6ed-0a5252caf399,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=8730a350-a761-4785-a6ed-0a5252caf399,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bde3cff94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2643 identity=55768 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9bde3cff94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2643 identity=55768 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bde3cff94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2643 identity=55768 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bde3cff94 endpointID=2643 k8sNamespace=openstack k8sPodName=keystone-db-init-mrfvg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8730a350-a761-4785-a6ed-0a5252caf399 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=8730a350-a761-4785-a6ed-0a5252caf399 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9bde3cff94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2643 identity=55768 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/keystone-db-init-mrfvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 d6858e03-b2df-475c-8aa6-81ed04ac8b50 default }" containerID=d5c6c91206db68c3dc7f2b1fc7046f955b8b23aac0b7dc04feeeca96dc9029f2 datapathConfiguration="&{false false false false false }" interface=lxccd4fac27a26d k8sPodName=openstack/keystone-fernet-setup-2w9bv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5c6c91206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5c6c91206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5c6c91206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=5349 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5c6c91206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=23 identity=5349 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5c6c91206 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=23 identity=5349 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5c6c91206 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=5349 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5c6c91206 endpointID=23 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-2w9bv subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=8647df0f-756e-4e0f-8b0b-c479dd946e8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d5c6c91206 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=23 identity=5349 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-fernet-setup-2w9bv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 69207215-45df-45c8-8556-f4d69825ecd2 default }" containerID=8bab80a0ea9041b0a1b08630d3b709b3bea99e1607febf0fb89665b8a9a3f3f0 datapathConfiguration="&{false false false false false }" interface=lxc0a392791d0fe k8sPodName=openstack/keystone-db-sync-t2jxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bab80a0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bab80a0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bab80a0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=17142 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bab80a0ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=17142 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8bab80a0ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3556 identity=17142 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bab80a0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3556 identity=17142 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bab80a0ea endpointID=3556 k8sNamespace=openstack k8sPodName=keystone-db-sync-t2jxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=ab0224d0-0671-443d-952a-9dd568ef9d8a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8bab80a0ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3556 identity=17142 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-db-sync-t2jxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 b39b866b-d818-418a-8eb1-2ef88bfa7f23 default }" containerID=158af6eece78cad9681c44a88cff3e5f1730e2b03707a50ca60cdd8d4b5f5c8e datapathConfiguration="&{false false false false false }" interface=lxcc272eab003f7 k8sPodName=openstack/keystone-rabbit-init-z4n46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=158af6eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=158af6eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=158af6eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identity=34322 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=158af6eece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3291 identity=34322 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=158af6eece datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3291 identity=34322 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=158af6eece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3291 identity=34322 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=daemon level=info msg="Delete endpoint request" containerID=158af6eece endpointID=3291 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-z4n46 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d1525ff4-8fa2-4386-87eb-6bbc10a4b13f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=158af6eece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3291 identity=34322 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/keystone-rabbit-init-z4n46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 32a942f4-ecd9-440e-9d6f-a28a076ee292 default }" containerID=2fe52d517616a0a8804a8e5cb82fc97bec72e74e38490643dc3957e4688a6695 datapathConfiguration="&{false false false false false }" interface=lxc61e50dd7d4f0 k8sPodName=openstack/keystone-domain-manage-jljtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=1074 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=1074 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2fe52d5176 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=933 identity=1074 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2fe52d5176 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=933 identity=1074 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2fe52d5176 endpointID=933 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jljtf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=b3a89066-242b-42cd-bc23-0c20ccb4a437 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2fe52d5176 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=933 identity=1074 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/keystone-domain-manage-jljtf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 905c818e-07ed-48eb-8365-81f4e03bf001 default }" containerID=a367b3143d6dc40fad588633a590a7d7443125250e646d53f6fe2631ff3255e3 datapathConfiguration="&{false false false false false }" interface=lxc6c2b85135bc6 k8sPodName=openstack/keystone-bootstrap-4c6wz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identity=1742 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1343 identity=1742 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a367b3143d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1343 identity=1742 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=endpoint level=info msg="Successful endpoint creation" containerID=a367b3143d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1343 identity=1742 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a367b3143d endpointID=1343 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4c6wz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=dd059cec-5980-438e-9f59-9e1158ac2f3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a367b3143d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1343 identity=1742 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/keystone-bootstrap-4c6wz subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03389492337035183 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.3 ad7343fd-8876-40d8-80f0-6ce24d39257d default }" containerID=2d39493b5de11f0a4f0b095533a7711e619f616f9b15665543f4564d0e78e0c1 datapathConfiguration="&{false false false false false }" interface=lxcca38bd3b5a83 k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d39493b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d39493b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d39493b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d39493b5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3866 identity=3032 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d39493b5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3866 identity=3032 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d39493b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3866 identity=3032 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=daemon level=info msg="Delete endpoint request" containerID=2d39493b5d endpointID=3866 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2d39493b5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3866 identity=3032 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-48ea7aa6-682d-4116-b966-ba6dff2b0bee subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 f5fa0f2f-3f43-4e76-9d02-f2c77ae91761 default }" containerID=4f85784dfc56e778a874a7dec905f97d8d0e0c4fbd98f7dc69be6334bb4bb81e datapathConfiguration="&{false false false false false }" interface=lxcd282fac57487 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f85784dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f85784dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4f85784dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=63109 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f85784dfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=561 identity=63109 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f85784dfc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=561 identity=63109 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f85784dfc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=561 identity=63109 ipv4=10.0.0.165 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.86 fb4c0f7c-47ef-4518-815d-6629369921d5 default }" containerID=ccd952da895fcc8939332fa76b2f94624cab507d174e2d67254bb2e06cc5b8b9 datapathConfiguration="&{false false false false false }" interface=lxc6ec413e53836 k8sPodName=openstack/barbican-api-75c595bb77-kztj7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=57123 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=57123 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.110 5876ec59-308e-4342-aee9-b6360d262d38 default }" containerID=c804507af53709db06b46e8da29ba97976fb8de84e4bb3f5f851026de4a3dee7 datapathConfiguration="&{false false false false false }" interface=lxc5a6dab3ac81f k8sPodName=openstack/barbican-db-init-8x27c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c804507af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c804507af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c804507af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=29474 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c804507af5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=29474 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccd952da89 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=538 identity=57123 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccd952da89 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=57123 ipv4=10.0.0.86 ipv6= k8sPodName=openstack/barbican-api-75c595bb77-kztj7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c804507af5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=13 identity=29474 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=endpoint level=info msg="Successful endpoint creation" containerID=c804507af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=29474 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c804507af5 endpointID=13 k8sNamespace=openstack k8sPodName=barbican-db-init-8x27c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=75fd2ec5-2429-4e03-84d2-f6c8de05723f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c804507af5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=13 identity=29474 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-db-init-8x27c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 d8903c66-a82b-4ca8-9084-34e1d2db4493 default }" containerID=cffee468fcdea8df991ad81678e513b170456a6742fc5c5ae4a5cc3a8fdded04 datapathConfiguration="&{false false false false false }" interface=lxc6c1b4e365d13 k8sPodName=openstack/barbican-db-sync-nd7cf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cffee468fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cffee468fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cffee468fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=16611 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cffee468fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=55 identity=16611 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=cffee468fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=55 identity=16611 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=endpoint level=info msg="Successful endpoint creation" containerID=cffee468fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=16611 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cffee468fc endpointID=55 k8sNamespace=openstack k8sPodName=barbican-db-sync-nd7cf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=e7a96bc5-37af-4ac4-9b21-4dbce35e073f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=cffee468fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=55 identity=16611 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-nd7cf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.142 523c24e4-0a6f-4507-b6a4-0aaafcab6bd3 default }" containerID=8582260a6350383b3fe34245523f4c2002827ed46cd8b453705ff76295d3ef09 datapathConfiguration="&{false false false false false }" interface=lxc351f3b986081 k8sPodName=openstack/barbican-rabbit-init-nsmbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8582260a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8582260a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8582260a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=57006 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8582260a63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=868 identity=57006 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8582260a63 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=868 identity=57006 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=8582260a63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=57006 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=daemon level=info msg="Delete endpoint request" containerID=8582260a63 endpointID=868 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-nsmbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3d0dcd9b-9c9b-4552-b729-3f65b020043b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8582260a63 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=868 identity=57006 ipv4=10.0.0.142 ipv6= k8sPodName=openstack/barbican-rabbit-init-nsmbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 0c2fa46c-3ccc-4ace-adf6-c05c9a15442b default }" containerID=50fcb3454a90a0d81cd8cc74d74b241c047faaa502fc86131802cd94e83b06c2 datapathConfiguration="&{false false false false false }" interface=lxcc14be724bcee k8sPodName=openstack/barbican-ks-service-xkxw5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50fcb3454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50fcb3454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=50fcb3454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identity=8351 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50fcb3454a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3647 identity=8351 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50fcb3454a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3647 identity=8351 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=50fcb3454a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3647 identity=8351 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50fcb3454a endpointID=3647 k8sNamespace=openstack k8sPodName=barbican-ks-service-xkxw5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=893bdbc3-d799-463e-b9f4-cf427cce0184 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=50fcb3454a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3647 identity=8351 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-service-xkxw5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 94a2e33c-43b4-48b6-8368-130f22b4d056 default }" containerID=fc2d1d681e443e84070fb29c8cacc2abccc2f2a5e1694daa4c42b8e6781958b4 datapathConfiguration="&{false false false false false }" interface=lxc094253b4db10 k8sPodName=openstack/barbican-ks-endpoints-6wlhn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=40574 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=771 identity=40574 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc2d1d681e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=771 identity=40574 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc2d1d681e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=771 identity=40574 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc2d1d681e endpointID=771 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6wlhn subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fa27dbfb-65f6-4fc2-a00c-420f8b290393 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=fc2d1d681e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=771 identity=40574 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6wlhn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 db8f3328-77ca-4534-9d21-da2753f8576b default }" containerID=353e396fabefff187e9173837d7877d13b824657196190ca6e1f30cd252c8f0d datapathConfiguration="&{false false false false false }" interface=lxc6efa78839dbe k8sPodName=openstack/barbican-ks-user-gh7hm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=353e396fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=353e396fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=353e396fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=37939 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=353e396fab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3158 identity=37939 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=353e396fab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3158 identity=37939 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=endpoint level=info msg="Successful endpoint creation" containerID=353e396fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=37939 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=353e396fab endpointID=3158 k8sNamespace=openstack k8sPodName=barbican-ks-user-gh7hm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=53e94bab-2696-47ac-b0a2-fac1a44ca43b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=353e396fab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3158 identity=37939 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/barbican-ks-user-gh7hm subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.88 f4c2d8df-35cd-451c-9f8e-ee2106c648b9 default }" containerID=affd42f34fd2782602d27e42fc281fd58a86f92ec9cc2c3fc3b8d15fd455d307 datapathConfiguration="&{false false false false false }" interface=lxcb43e6da05717 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=7845 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=657 identity=7845 ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=affd42f34f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=657 identity=7845 ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p subsys=endpoint level=info msg="Successful endpoint creation" containerID=affd42f34f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=657 identity=7845 ipv4=10.0.0.88 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-q8k2p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 89f59317-57a1-485f-bd42-57d93457c7f0 default }" containerID=e64467e1600c144b17b8753af8a0812d548a5cc36d37cb5d03fa06af851dc010 datapathConfiguration="&{false false false false false }" interface=lxcab97875e0d9f k8sPodName=openstack/rook-ceph-detect-version-8q7tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e64467e160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e64467e160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e64467e160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=36454 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e64467e160 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=36454 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e64467e160 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=609 identity=36454 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=e64467e160 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=36454 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e64467e160 endpointID=609 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-8q7tk subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=f6edf590-ad3c-4cc0-bd16-c4a14d8cc9bf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=e64467e160 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=36454 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/rook-ceph-detect-version-8q7tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 a0bbe26d-5ed1-4dde-82f5-2a75f2fdc6fa default }" containerID=ceef1342c7f41d9697abd91f740132f5f0ce3b40bdbfad6e71f21920e89f69ec datapathConfiguration="&{false false false false false }" interface=lxc68e16a4a0212 k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceef1342c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceef1342c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ceef1342c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=3032 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceef1342c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=574 identity=3032 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceef1342c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=574 identity=3032 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceef1342c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=574 identity=3032 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.177 a3ea2eb1-7101-4b87-b86f-deb349d47d30 default }" containerID=74ad598f65773b8dc461995f8665260f9a1eeb336991f0e792d3cd1f52b64a78 datapathConfiguration="&{false false false false false }" interface=lxcc5fb85602c5b k8sPodName=openstack/ceph-object-controller-detect-version-25ngz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74ad598f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74ad598f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74ad598f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=41257 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=74ad598f65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1856 identity=41257 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74ad598f65 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1856 identity=41257 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=endpoint level=info msg="Successful endpoint creation" containerID=74ad598f65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=41257 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=daemon level=info msg="Delete endpoint request" containerID=ceef1342c7 endpointID=574 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ceef1342c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=574 identity=3032 ipv4=10.0.0.203 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b2e5c0af-a5ef-44c1-ac33-b53ef582835d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 43728246-8f5f-43ea-a6ca-75a42d66fa41 default }" containerID=ee57bb002c61f39084b008e56b8db7a82fcbfb55a131220b9183afb9800f1155 datapathConfiguration="&{false false false false false }" interface=lxcf5806870cef9 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=2454 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=215 identity=2454 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee57bb002c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=215 identity=2454 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee57bb002c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=215 identity=2454 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74ad598f65 endpointID=1856 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-25ngz subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=2ec2c0b0-15a3-4045-a94e-0cd924e11608 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=74ad598f65 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1856 identity=41257 ipv4=10.0.0.177 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25ngz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 0a3f795f-2bb9-4c21-b304-67be0cec9f69 default }" containerID=6717b96185dce8c3fe738b78ba442cac53483e617c68c98a7731b2370ae5dd50 datapathConfiguration="&{false false false false false }" interface=lxc39694205c6c5 k8sPodName=openstack/glance-db-init-zrptb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6717b96185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6717b96185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6717b96185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=14329 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6717b96185 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1080 identity=14329 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6717b96185 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1080 identity=14329 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=endpoint level=info msg="Successful endpoint creation" containerID=6717b96185 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=14329 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6717b96185 endpointID=1080 k8sNamespace=openstack k8sPodName=glance-db-init-zrptb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=ef8a55fe-2b6f-4d74-95d4-179f6f7a0e7c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6717b96185 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1080 identity=14329 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-db-init-zrptb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 d2bd956f-5e33-4ad4-a57e-ed5462f6839d default }" containerID=53cd4dfc1d7ac63d67f2782ac54dcadac2c2efc45c42e89c8f839b15d38e3e97 datapathConfiguration="&{false false false false false }" interface=lxc989135a3b746 k8sPodName=openstack/glance-db-sync-zcjzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53cd4dfc1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53cd4dfc1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53cd4dfc1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identity=17018 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53cd4dfc1d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2953 identity=17018 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=53cd4dfc1d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2953 identity=17018 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=53cd4dfc1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2953 identity=17018 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.220 34e567e2-7cdc-412a-be5e-7cd5f9934d31 default }" containerID=516bed9a9c9a6b1abf7a9f397d6256628bc247c876c7398b6be63490bec525fb datapathConfiguration="&{false false false false false }" interface=lxc3da5cb0f8814 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=516bed9a9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=516bed9a9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=516bed9a9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=13725 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=516bed9a9c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=13725 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 b97b65a2-d0e6-40ad-a386-f3e294d24ab6 default }" containerID=c7e5e0572fdc4a6eecc070ac112597318366d748a369aecdf2a88c752c6a956f datapathConfiguration="&{false false false false false }" interface=lxc3dc80ad3dd31 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7e5e0572f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7e5e0572f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7e5e0572f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=10726 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7e5e0572f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2567 identity=10726 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=516bed9a9c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1494 identity=13725 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb subsys=endpoint level=info msg="Successful endpoint creation" containerID=516bed9a9c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1494 identity=13725 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-d2pnb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c7e5e0572f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2567 identity=10726 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7e5e0572f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2567 identity=10726 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-bpqwv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53cd4dfc1d endpointID=2953 k8sNamespace=openstack k8sPodName=glance-db-sync-zcjzw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=8254a235-ab7c-4978-a2bf-01373dbd3f59 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=53cd4dfc1d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2953 identity=17018 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/glance-db-sync-zcjzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 f2753c00-8f9d-4631-86f8-1383a7ff971f default }" containerID=0cac3e443ac3816c657fb667240a64be90da316c53c8e826970da9c2c1e6f12f datapathConfiguration="&{false false false false false }" interface=lxc702993c03079 k8sPodName=openstack/glance-rabbit-init-zq9fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1895 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=45 identity=1895 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0cac3e443a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=45 identity=1895 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=0cac3e443a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=1895 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0cac3e443a endpointID=45 k8sNamespace=openstack k8sPodName=glance-rabbit-init-zq9fb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=d0882d79-0e74-49e7-9871-f33e20ffdd53 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0cac3e443a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=45 identity=1895 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/glance-rabbit-init-zq9fb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.21 9887fe40-b680-4141-b213-9dbf20dc5cee default }" containerID=60ad18ec31350c65674d436c15bdd5e1f0e760f0b33b8fe8d5e0072cc3416b97 datapathConfiguration="&{false false false false false }" interface=lxcdff7698541c5 k8sPodName=openstack/glance-ks-service-v2ljj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60ad18ec31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60ad18ec31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60ad18ec31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=22340 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60ad18ec31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=432 identity=22340 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=60ad18ec31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=432 identity=22340 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=endpoint level=info msg="Successful endpoint creation" containerID=60ad18ec31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=22340 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60ad18ec31 endpointID=432 k8sNamespace=openstack k8sPodName=glance-ks-service-v2ljj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=7174f1f2-8080-49ff-8714-7283d1412b25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=60ad18ec31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=432 identity=22340 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/glance-ks-service-v2ljj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 907a5094-166b-43eb-a271-bf1605553484 default }" containerID=09c42b9c2d2defbec4f5997c299f2de1d0f50679a7c3433dbd3d47573b0f7846 datapathConfiguration="&{false false false false false }" interface=lxcae8077f576fd k8sPodName=openstack/glance-ks-endpoints-8zvmv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=5886 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3288 identity=5886 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09c42b9c2d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3288 identity=5886 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=endpoint level=info msg="Successful endpoint creation" containerID=09c42b9c2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=5886 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=09c42b9c2d endpointID=3288 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-8zvmv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=324d3439-cedf-4f44-9b41-f759c4de2a8b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=09c42b9c2d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3288 identity=5886 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/glance-ks-endpoints-8zvmv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 a5ad5caf-7187-4ab6-bca0-09334b18d021 default }" containerID=afce3a2a8634d94a863b883966c3e4216f0e9b66046aa1d189c7a34c52af6a34 datapathConfiguration="&{false false false false false }" interface=lxc56b9773b6f34 k8sPodName=openstack/glance-ks-user-rmg8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=afce3a2a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=afce3a2a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=afce3a2a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identity=64587 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=afce3a2a86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=184 identity=64587 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=afce3a2a86 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=184 identity=64587 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=afce3a2a86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=184 identity=64587 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=daemon level=info msg="Delete endpoint request" containerID=afce3a2a86 endpointID=184 k8sNamespace=openstack k8sPodName=glance-ks-user-rmg8p subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=93786df7-3cfb-47ea-8636-c17d9dbe5c41 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=afce3a2a86 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=184 identity=64587 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-ks-user-rmg8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 c8f845be-8acd-4a8a-8519-ecb567ccbfbf default }" containerID=e22aecdc76e8ccf92a0438a84ca98eee3d77dbcf5af1fcd93086c55e93826d57 datapathConfiguration="&{false false false false false }" interface=lxc5e0a830d2f39 k8sPodName=openstack/glance-metadefs-load-qbgg7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e22aecdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e22aecdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e22aecdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identity=22644 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e22aecdc76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=567 identity=22644 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e22aecdc76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=567 identity=22644 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e22aecdc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=567 identity=22644 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=daemon level=info msg="Delete endpoint request" containerID=e22aecdc76 endpointID=567 k8sNamespace=openstack k8sPodName=glance-metadefs-load-qbgg7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=7b691fdf-19f3-4328-a78e-6cd0d1ab8267 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e22aecdc76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=567 identity=22644 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/glance-metadefs-load-qbgg7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2df1723f-1ccb-456c-b6bc-d54ee3cbdb37 default }" containerID=084f41e625e479192f4ed88aa139ebfe9f93d53495b9a86fa8e10e19f64cadb1 datapathConfiguration="&{false false false false false }" interface=lxc2a5aac4ea0dc k8sPodName=openstack/glance-storage-init-f8l54 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=13511 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=13511 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=084f41e625 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2751 identity=13511 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=endpoint level=info msg="Successful endpoint creation" containerID=084f41e625 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2751 identity=13511 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=084f41e625 endpointID=2751 k8sNamespace=openstack k8sPodName=glance-storage-init-f8l54 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=dfdbabc4-27e4-4fb6-adb6-45fa58ca3b0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=084f41e625 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2751 identity=13511 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-storage-init-f8l54 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 ebcc91be-ec9b-49ae-9042-0ea8ece83dce default }" containerID=98f5e4009236e3303e03dc369f68fada905a1c58591f8550901be3f1af510ce5 datapathConfiguration="&{false false false false false }" interface=lxcef36cf62f7a0 k8sPodName=openstack/glance-api-f9886489b-rhhlq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98f5e40092 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98f5e40092 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98f5e40092 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=15219 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98f5e40092 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=86 identity=15219 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98f5e40092 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=86 identity=15219 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq subsys=endpoint level=info msg="Successful endpoint creation" containerID=98f5e40092 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=86 identity=15219 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-api-f9886489b-rhhlq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 c9ef54a1-7a8a-4b1d-9234-f3ac7854f9ce default }" containerID=2c8ab6c10e2062d1ed8beed0f75545bab8d64961fbbcd564f3f1aa651c2ede50 datapathConfiguration="&{false false false false false }" interface=lxc0b0808dea5c7 k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=2089 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=2089 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 6da8cef4-6bae-4b05-b0b8-6c3c4c6807b5 default }" containerID=39888407672ca119025a7061843da6a5cb3ec209d9bc4d8c5515ec3d0c63187c datapathConfiguration="&{false false false false false }" interface=lxcc7694b2cbbc3 k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3988840767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3988840767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3988840767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=6287 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3988840767 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=28 identity=6287 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c8ab6c10e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=617 identity=2089 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c8ab6c10e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=617 identity=2089 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/staffeln-conductor-7f969d9d48-f2rtm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3988840767 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=28 identity=6287 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3988840767 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=28 identity=6287 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/staffeln-api-65d9cd8bbc-mc4f7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 acb70ce1-586b-416c-ad5f-3ab77ad5bfa0 default }" containerID=0f3b4c1dca3f8b709edac7a5bd64f83dbec90268233c5ed3bb721a962f87151e datapathConfiguration="&{false false false false false }" interface=lxcb1ef31a2641c k8sPodName=openstack/staffeln-db-init-5fhqz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f3b4c1dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f3b4c1dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f3b4c1dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=3463 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f3b4c1dca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=3463 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f3b4c1dca datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=324 identity=3463 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f3b4c1dca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=3463 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f3b4c1dca endpointID=324 k8sNamespace=openstack k8sPodName=staffeln-db-init-5fhqz subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8c1656eb-5e24-4b07-b6e3-a1e7657520b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=0f3b4c1dca datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=3463 ipv4=10.0.0.201 ipv6= k8sPodName=openstack/staffeln-db-init-5fhqz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 0a399f91-5963-4411-a110-5929e1d1c55e default }" containerID=f1baf8529371de272fab530eb5c73a92d81d77382cfe1514031b6bff9d6a7d8f datapathConfiguration="&{false false false false false }" interface=lxc7c32387fc1f3 k8sPodName=openstack/staffeln-db-sync-njfk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f1baf85293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f1baf85293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f1baf85293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=59145 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=2aca847c-3486-4bdb-ae95-11eedd8582d7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f1baf85293 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=59145 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f1baf85293 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=170 identity=59145 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f1baf85293 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=170 identity=59145 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/staffeln-db-sync-njfk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager