level=info msg="Memory available for map entries (0.003% of 67421634560B): 168554086B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.291323ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="63.401µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="898.281µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="10.43µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=98.229765ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.07µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="19.42µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="55.502µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.832µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="67.322µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="397.37µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.95µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.793443ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.827712ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="63.941µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="59.011µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="221.105µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.002µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="76.032µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Start hook executed" duration=50.322691ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="115.983µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="67.471µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.166.0.0/16 level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.323039ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.21µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.52863ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.791µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.750754ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="6.821µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="4.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="28.25µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="15.49µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="31.891µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="400.349µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.701µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="214.045µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration=1.037626ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.318232ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.39µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="20.99µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.166 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.166 ipAddr.ipv6="" k8sNodeIP=199.19.213.166 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.166" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.96" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.166" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.166} {CiliumInternalIP 10.0.0.96}] 10.0.0.0/24 [] [] 10.0.0.218 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36637" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.84358304s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="19.321µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="6.26µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="62.792µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="12.191µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2065 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.907605053s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=288.599304ms file-path=/var/run/cilium/state/templates/b0717d5808ccc34a6ffd33c4d72df824ae86640c53be490349c8c3d5a9b71439/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2065 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3252 identity=4 identityLabels="reserved:health" ipv4=10.0.0.218 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Create endpoint request" addressing="&{10.0.0.130 2fdea59f-ae88-449e-9639-c465c53f5d61 default }" containerID=1e57eefbd91dbef463585971c9b9abb52aa679e81bc364ff97347620fb488338 datapathConfiguration="&{false false false false false }" interface=lxcc9589602ec4f k8sPodName=kube-system/coredns-7c96b6546b-8d8tj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e57eefbd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e57eefbd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.78 6589cf2c-7c29-4d0e-93db-56467b80a3de default }" containerID=554ab7b8e00ceddfaf4c88f669807edd85c103af278ad6746f52b220d34b7cbe datapathConfiguration="&{false false false false false }" interface=lxc0be7d2195974 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e57eefbd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=13564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e57eefbd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=13564 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=6974 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1021 identity=6974 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.076246353s file-path=/var/run/cilium/state/templates/dfa8167628a25a638de8ad0408556977d0fd2f10e74f724ce8648a641b918a44/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3252 identity=4 ipv4=10.0.0.218 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e57eefbd9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=606 identity=13564 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e57eefbd9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=606 identity=13564 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=554ab7b8e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1021 identity=6974 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=endpoint level=info msg="Successful endpoint creation" containerID=554ab7b8e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1021 identity=6974 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=554ab7b8e0 endpointID=1021 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-z9jzp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=44282e8b-4832-41d5-85ac-97aafbf3a625 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=554ab7b8e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1021 identity=6974 ipv4=10.0.0.78 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-z9jzp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.55 24a91f80-6c2d-48c9-a325-a08e5ca6d2b8 default }" containerID=fc031c1604799f487bccdfb4f4a94e6d5aee27846ce098f8f0e52fc0e370d11a datapathConfiguration="&{false false false false false }" interface=lxccea09fda884e k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc031c1604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc031c1604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc031c1604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=58366 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fc031c1604 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2767 identity=58366 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc031c1604 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2767 identity=58366 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc031c1604 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2767 identity=58366 ipv4=10.0.0.55 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-sm25z subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2065 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02065 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02065 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02065 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02065:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2065 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 2e97c9a1-20c5-4b55-a6ec-8d96a58b8216 default }" containerID=f946b1e96b4da1ade6046ef9a3702dfc9a01bfa0deb812d87938a9232dc9e6ca datapathConfiguration="&{false false false false false }" interface=lxc14cb3fedc00b k8sPodName=kube-system/coredns-67659f764b-mfg8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f946b1e96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f946b1e96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 d5c9483b-8266-4cfb-b055-7e94ba82bfa9 default }" containerID=835a703162e18b5ad8d5551b0dff0e5179032ff03550fc9eb8712f098425a269 datapathConfiguration="&{false false false false false }" interface=lxcfd178bb983f0 k8sPodName=kube-system/coredns-67659f764b-v9fjx labels="[]" subsys=daemon sync-build=true level=info msg="Identity of endpoint changed" containerID=f946b1e96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=13564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f oldIdentity="no identity" subsys=endpoint level=info msg="New endpoint" containerID=835a703162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f946b1e96b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2759 identity=13564 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=835a703162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx subsys=endpoint level=info msg="Identity of endpoint changed" containerID=835a703162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identity=13564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=835a703162 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identity=13564 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f946b1e96b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2759 identity=13564 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=f946b1e96b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2759 identity=13564 ipv4=10.0.0.169 ipv6= k8sPodName=kube-system/coredns-67659f764b-mfg8f subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=835a703162 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1333 identity=13564 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=835a703162 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1333 identity=13564 ipv4=10.0.0.32 ipv6= k8sPodName=kube-system/coredns-67659f764b-v9fjx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 3c818610-4c0d-4608-bfe4-d7fd362789ff default }" containerID=eef2e790ba4bca4831e2a586351d2662757d2c5d98f1c3ef4d8ded3ac34645c0 datapathConfiguration="&{false false false false false }" interface=lxc649964dc9459 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eef2e790ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eef2e790ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eef2e790ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=8656 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eef2e790ba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3164 identity=8656 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eef2e790ba datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3164 identity=8656 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eef2e790ba datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3164 identity=8656 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-z6898 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1e57eefbd9 endpointID=606 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8d8tj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=1e57eefbd9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=606 identity=13564 ipv4=10.0.0.130 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8d8tj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 4c7407b0-b6ad-48a7-8604-214365c290af default }" containerID=5983ce0c8e30a66e597a990ff0a6a2fbc783b55c5542a89c3a4bfe419f01efef datapathConfiguration="&{false false false false false }" interface=lxc07f904c23416 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5983ce0c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5983ce0c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5983ce0c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=8009 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5983ce0c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1795 identity=8009 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5983ce0c8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1795 identity=8009 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5983ce0c8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1795 identity=8009 ipv4=10.0.0.24 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-tjppv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.233 d0a8f5c8-3810-485f-93b0-f6aa450d41fb default }" containerID=a7b74acf919812fe9e5ceb25809336ddaa522454db717e983f5375303ed1675a datapathConfiguration="&{false false false false false }" interface=lxcc02ad1605315 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7b74acf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7b74acf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.131 42172617-afa7-4d13-a4d0-897b68ae71a4 default }" containerID=c7ff3d8e8195d6edafa33db725780d11856a9fe8db68b5b8a5846b6437db7bd5 datapathConfiguration="&{false false false false false }" interface=lxc720ecd3122ce k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c7ff3d8e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c7ff3d8e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7b74acf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=62776 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7b74acf91 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=451 identity=62776 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c7ff3d8e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=36059 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c7ff3d8e81 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=36059 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c7ff3d8e81 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=764 identity=36059 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c7ff3d8e81 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=764 identity=36059 ipv4=10.0.0.131 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-62pbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a7b74acf91 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=451 identity=62776 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7b74acf91 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=451 identity=62776 ipv4=10.0.0.233 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvfmg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 21967a0c-5c1a-484b-bc83-934c4097b8e5 default }" containerID=ec9669c676ecd580f3805fe2f36fa3df8908db572379ef2f5191b4ce927c0c9d datapathConfiguration="&{false false false false false }" interface=lxce97b9e98bc94 k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec9669c676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec9669c676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec9669c676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=52722 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec9669c676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=52722 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec9669c676 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1889 identity=52722 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec9669c676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1889 identity=52722 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ec9669c676 endpointID=1889 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4s7qc subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=ffa4782f-5abf-4c61-a729-0487899d9ae2 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=ec9669c676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1889 identity=52722 ipv4=10.0.0.145 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4s7qc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 5a718da5-f9c2-4196-9249-70488677ca3f default }" containerID=5ded9c4a24c34591f353dcf48d48c134a509eef11f8c3e7e4e001c65ca1294f3 datapathConfiguration="&{false false false false false }" interface=lxc27bbdfe3902a k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ded9c4a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ded9c4a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ded9c4a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=2567 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5ded9c4a24 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=2567 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ded9c4a24 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=295 identity=2567 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ded9c4a24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=295 identity=2567 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ded9c4a24 endpointID=295 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-7l8jv subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=53d30b39-4c0b-48ed-bbbc-ac9e419552bf k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=5ded9c4a24 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=295 identity=2567 ipv4=10.0.0.75 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-7l8jv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.73 8c99d79f-cf43-44d3-9a07-b940b9739b11 default }" containerID=3da258427706f316731d4b3bb5627ebbc6aecdfe3b6f7f65ac70b5cbac83a361 datapathConfiguration="&{false false false false false }" interface=lxc43a8606ed966 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3da2584277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3da2584277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3da2584277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=14291 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3da2584277 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=138 identity=14291 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3da2584277 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=138 identity=14291 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn subsys=endpoint level=info msg="Successful endpoint creation" containerID=3da2584277 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=138 identity=14291 ipv4=10.0.0.73 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-gp2hn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.27 3a2b5b6e-04a1-46d4-b407-a4e3bf74cb04 default }" containerID=7a121d4e0fe506601b331d6f90e331bc3f3503d0fe16bc21ffbc4279bb7c06d2 datapathConfiguration="&{false false false false false }" interface=lxc5f9268c2128b k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a121d4e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a121d4e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a121d4e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=23919 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a121d4e0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2133 identity=23919 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a121d4e0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2133 identity=23919 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a121d4e0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=23919 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a121d4e0f endpointID=2133 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-ck7jz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=ebfdc828-26f9-4b9f-ae10-9bf99d543f76 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7a121d4e0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2133 identity=23919 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-ck7jz subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=b16c6180-5429-42c1-afd4-f6bacf5b7cb2] Description:}]" policyAddRequest=752e31f6-64b0-4039-80da-b1fc57cdbd0f subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=752e31f6-64b0-4039-80da-b1fc57cdbd0f policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=47e00634-e2e0-4190-8e24-83ac6dd3cae9] Description:}]" policyAddRequest=cc3c5198-2500-4be0-8ffc-4fcea573ded6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=cc3c5198-2500-4be0-8ffc-4fcea573ded6 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.11 4888ddc4-ca86-40a8-bbb2-13f1147e869a default }" containerID=bed465b8757e6084fe752abda336f8ef8af5609806bca0222a2aa4cc468328e4 datapathConfiguration="&{false false false false false }" interface=lxcd4634565f2aa k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bed465b875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bed465b875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bed465b875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=12983 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bed465b875 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=849 identity=12983 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bed465b875 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=849 identity=12983 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl subsys=endpoint level=info msg="Successful endpoint creation" containerID=bed465b875 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=849 identity=12983 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-dl7rl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 45739766-09de-46df-9465-de1ee0df7f19 default }" containerID=d6d33d2e1f0fabb58dd8dacb4a4d321246ba175a7618096a626aa2d4cddfaa2e datapathConfiguration="&{false false false false false }" interface=lxc72fda9d1bdf1 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d6d33d2e1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d6d33d2e1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d6d33d2e1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=7831 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d6d33d2e1f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=587 identity=7831 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d6d33d2e1f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=587 identity=7831 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h subsys=endpoint level=info msg="Successful endpoint creation" containerID=d6d33d2e1f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=587 identity=7831 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-d4r5h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 1b119369-abf6-43cf-b849-6004d4fb5a59 default }" containerID=082d5b7060b592c7368d2f3ef1091b62f1f00156ce2c43a782d1ccf3fd81da2a datapathConfiguration="&{false false false false false }" interface=lxc2d760e08baa7 k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=082d5b7060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=082d5b7060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=082d5b7060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=9233 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=082d5b7060 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=375 identity=9233 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=082d5b7060 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=375 identity=9233 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=082d5b7060 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=375 identity=9233 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hdzd4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.193 2fea09fd-ca8f-4b73-8a07-a95d25b71e18 default }" containerID=61a10e8cbd007ad9f1191561e6cce076e6735f415c68d1b56cc888e8955206a1 datapathConfiguration="&{false false false false false }" interface=lxc06224dcee9ac k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=61a10e8cbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=61a10e8cbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=61a10e8cbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=61a10e8cbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=55479 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=61a10e8cbd datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3304 identity=55479 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=61a10e8cbd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3304 identity=55479 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.99 4e476409-a9dc-4cf3-a224-6889826acac6 default }" containerID=fd769049c092eaae94c9999c6da704ed0c9802a0f9a6e1ded61cb663270dc737 datapathConfiguration="&{false false false false false }" interface=lxc6eb483b76a61 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd769049c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd769049c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd769049c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=1774 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd769049c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=1774 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd769049c0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=420 identity=1774 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd769049c0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=420 identity=1774 ipv4=10.0.0.99 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=61a10e8cbd endpointID=3304 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=61a10e8cbd datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3304 identity=55479 ipv4=10.0.0.193 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc894c9d-73ea-4042-8791-cb8ad0a319a7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 60f76930-0049-4ad2-a718-39fbcc63bf54 default }" containerID=0b62a718e3b91390be1d74ef0615090a3dbbcdfe5cd4e5b2b2e15c7465d3caac datapathConfiguration="&{false false false false false }" interface=lxcc587c3d02250 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b62a718e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b62a718e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b62a718e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=14987 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0b62a718e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2691 identity=14987 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0b62a718e3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2691 identity=14987 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b62a718e3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2691 identity=14987 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=703db5f8-e83d-40c4-9c28-1f14a433f877] Description:}]" policyAddRequest=f81bcffb-81a6-4b8f-ace3-7c479b4c1eed subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f81bcffb-81a6-4b8f-ace3-7c479b4c1eed policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.249 3c03f052-161d-48c8-8f8a-5f4afe0c2db0 default }" containerID=4853b4cbfcb663ba4a81f43028238c9d1aaf61bfe9ff846568d4a9a58ca5704e datapathConfiguration="&{false false false false false }" interface=lxcd57ab41b4af1 k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4853b4cbfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4853b4cbfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4853b4cbfc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3366 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4853b4cbfc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3366 identity=55479 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4853b4cbfc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3366 identity=55479 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4853b4cbfc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3366 identity=55479 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=daemon level=info msg="Delete endpoint request" containerID=4853b4cbfc endpointID=3366 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=4853b4cbfc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3366 identity=55479 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d76c0cd4-43b7-41f5-a1be-81587c173008 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 2c39d087-2beb-494b-ab61-37993e182889 default }" containerID=93b77afa426f4fa1518330f11522ec6a4d2f7f82e41c7adfcc31de24fcf16523 datapathConfiguration="&{false false false false false }" interface=lxccf9345ee7aa6 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93b77afa42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93b77afa42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93b77afa42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=5952 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=93b77afa42 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1299 identity=5952 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93b77afa42 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1299 identity=5952 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=93b77afa42 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1299 identity=5952 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=db8301ec-c973-428c-9527-74f017fedb28] Description:}]" policyAddRequest=90652954-f6c7-47e0-b119-eb9084c28b6d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=90652954-f6c7-47e0-b119-eb9084c28b6d policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.66 3f415405-1382-4f29-9adc-097e804edbc0 default }" containerID=ea221ae3e8b1b29fa03db5fd501ccec59323a84422da66f6b70221a2e80b2097 datapathConfiguration="&{false false false false false }" interface=lxc3c3314ce2abf k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea221ae3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea221ae3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea221ae3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=9859 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea221ae3e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=9859 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea221ae3e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=307 identity=9859 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea221ae3e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=307 identity=9859 ipv4=10.0.0.66 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00978668145603095 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.207 c2db6a67-f503-4bc1-acfc-8516a66b9388 default }" containerID=1f85acbbbe6b2157bbd430e7968e201c80fb4d289cbc89dad90c0332d0fc634d datapathConfiguration="&{false false false false false }" interface=lxcac422c9abf33 k8sPodName=monitoring/node-feature-discovery-worker-26kkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f85acbbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f85acbbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f85acbbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=64296 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f85acbbbe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=861 identity=64296 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1f85acbbbe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=861 identity=64296 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f85acbbbe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=861 identity=64296 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-26kkw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 4c944323-0667-43d4-bb9a-5683c661435b default }" containerID=8c7bea70a95ac165a6327122a84781a0f2f4e6156b515237a5f2c34f540ccba5 datapathConfiguration="&{false false false false false }" interface=lxc262353fb6a09 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c7bea70a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 da8f17f8-cb16-452d-af85-e144895c3604 default }" containerID=d5138ea3d466c1238637cd537e91eb502e3c0d14200588ddd3f6eafa922ea555 datapathConfiguration="&{false false false false false }" interface=lxc3f908ded4213 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=8c7bea70a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn subsys=endpoint level=info msg="New endpoint" containerID=d5138ea3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5138ea3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c7bea70a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=55890 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=8c7bea70a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3796 identity=55890 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5138ea3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=4837 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5138ea3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=798 identity=4837 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c7bea70a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3796 identity=55890 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c7bea70a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3796 identity=55890 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-5r7qn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d5138ea3d4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=798 identity=4837 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5138ea3d4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=798 identity=4837 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-4b42q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.116 4b73b10d-cb14-4898-a592-26f245475007 default }" containerID=d0b89a6741ae96fc44bef75cdded3da009ea1cae687bf4cf33bf7df2115c62d3 datapathConfiguration="&{false false false false false }" interface=lxc1843436022f1 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0b89a6741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0b89a6741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0b89a6741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=24695 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d0b89a6741 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1781 identity=24695 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0b89a6741 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1781 identity=24695 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0b89a6741 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1781 identity=24695 ipv4=10.0.0.116 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-mh6g5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02065 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02065 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02065 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02065:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2065 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 eef29db2-ea8d-45d4-8f3b-12f7bee9e00f default }" containerID=b3a40fc10a0400a66c9dc3f05b6e7842530c9cd46f6617bb055b4d22c2f59557 datapathConfiguration="&{false false false false false }" interface=lxc4f019f626442 k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3a40fc10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3a40fc10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3a40fc10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=26236 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3a40fc10a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=484 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3a40fc10a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=484 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3a40fc10a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3a40fc10a endpointID=484 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-jzcfb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c7892bed-adb3-4d13-8b05-305420ba6cf9 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b3a40fc10a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=484 identity=26236 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-jzcfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 404df136-04b5-41b8-ab8f-020d5a316fdb default }" containerID=0570c309215b8189b71016460f986e93cfa5a7adea9889ea5a98c999ed17cc43 datapathConfiguration="&{false false false false false }" interface=lxcd887fdd655ff k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0570c30921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 364bfcc9-5832-448c-9ef5-54212e89a208 default }" containerID=28e24c62171a6be00fbd2de72cac7d6edeebd4b8d016b39e87a79dfe1fd47e1c datapathConfiguration="&{false false false false false }" interface=lxce67c73d3a847 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=0570c30921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk subsys=endpoint level=info msg="New endpoint" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0570c30921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=36335 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0570c30921 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3740 identity=36335 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=14669 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=606 identity=14669 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 5d2b1ce4-9835-4783-ad3f-d8b53946f96a default }" containerID=3fcfcf4ac8d34fbdbd29131ed10a9718004083f5ad31b993326f27a0f5962b88 datapathConfiguration="&{false false false false false }" interface=lxc48047365697f k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fcfcf4ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fcfcf4ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fcfcf4ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=49738 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fcfcf4ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=49738 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=28e24c6217 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=606 identity=14669 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=28e24c6217 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=606 identity=14669 ipv4=10.0.0.114 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-knkhp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0570c30921 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3740 identity=36335 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0570c30921 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3740 identity=36335 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-phqlk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3fcfcf4ac8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=49738 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fcfcf4ac8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=49738 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-696446786-pt4f6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.8 bfe41159-eb1c-4f29-9833-8d6115424416 default }" containerID=21b6e98f1b35a1f196e5f43c49c7637d2283ba84dd219ee0e4a8920a0ae36b3d datapathConfiguration="&{false false false false false }" interface=lxc93199f342aa5 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21b6e98f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21b6e98f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21b6e98f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=39489 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21b6e98f1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2347 identity=39489 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=21b6e98f1b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2347 identity=39489 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=21b6e98f1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2347 identity=39489 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 66ac4207-cae8-4ea8-96f6-a76bf71c1e0f default }" containerID=f9838b60c3828c98fc464206cb11c126f3a589f3607ddcea2ff436ce748a317f datapathConfiguration="&{false false false false false }" interface=lxc2ea38ebf56da k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9838b60c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9838b60c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9838b60c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f9838b60c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=55479 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f9838b60c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=55479 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9838b60c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=55479 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.20 c3524050-9d3a-4126-8453-f76c0857f876 default }" containerID=f607b02388f3b2a2f0ac981b437a2e8722e62fbd4b6acbb2fcdb53c352a830a7 datapathConfiguration="&{false false false false false }" interface=lxcfbe0733f35bc k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f607b02388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1573 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f607b02388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1573 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f607b02388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1573 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f607b02388 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1573 identity=55479 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f607b02388 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1573 identity=55479 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=endpoint level=info msg="Successful endpoint creation" containerID=f607b02388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1573 identity=55479 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=daemon level=info msg="Delete endpoint request" containerID=21b6e98f1b endpointID=2347 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-682h8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=90c054c0-0896-4244-9fae-6935c96ad6b1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=21b6e98f1b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2347 identity=39489 ipv4=10.0.0.8 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-682h8 subsys=endpoint level=info msg="Delete endpoint request" containerID=f607b02388 endpointID=1573 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=f9838b60c3 endpointID=1564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f607b02388 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1573 identity=55479 ipv4=10.0.0.20 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-4067b4e6-760b-4cc8-a4a9-c94b6abcaaad subsys=endpoint level=info msg="Removed endpoint" containerID=f9838b60c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=55479 ipv4=10.0.0.200 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-febab829-d7df-473e-b3af-18815592172e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 df2c4c31-3192-48f1-97d2-10fb34503838 default }" containerID=ff204db14a97201cfbdb2fe2c6b8606603884a159c8d549e0f371caf356fe7b2 datapathConfiguration="&{false false false false false }" interface=lxc6473df090149 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ff204db14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ff204db14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ff204db14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=9858 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ff204db14a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2091 identity=9858 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ff204db14a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2091 identity=9858 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ff204db14a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2091 identity=9858 ipv4=10.0.0.75 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 c13b9316-f27e-4c3b-9c7e-955408ee3952 default }" containerID=0532bb2ec784e4c006a11a53821bf3d35550fcc3fda774ecbab82e027f6b21b5 datapathConfiguration="&{false false false false false }" interface=lxc2189964be663 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0532bb2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0532bb2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0532bb2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=1463 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0532bb2ec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3553 identity=1463 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0532bb2ec7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3553 identity=1463 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0532bb2ec7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3553 identity=1463 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.237 bb173ae9-873d-47a7-8bd5-419e8c5fb889 default }" containerID=294954ff68a655591f9ec7529102c419c6718097c67f60648baefe3abb7a5c8c datapathConfiguration="&{false false false false false }" interface=lxc14465c3863fa k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=43458 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=43458 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.184 1d58a988-6e96-46d9-86cc-31560ebff4a1 default }" containerID=9e0f780fc6da9ee42c27b115cf2aa4ab96ff320fd2ac0e35b1d20075a7ddedcf datapathConfiguration="&{false false false false false }" interface=lxc479c8501bb4f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e0f780fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e0f780fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e0f780fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=18058 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e0f780fc6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1606 identity=18058 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=294954ff68 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=123 identity=43458 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv subsys=endpoint level=info msg="Successful endpoint creation" containerID=294954ff68 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=123 identity=43458 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-pdgwv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.240 3e6b2fd9-6c19-4e52-93b9-c2c047d1310a default }" containerID=2ea7d756685303a76ba4b8c754f70dd5ea7a8029fdeb1861fabf46a69a5a4f8e datapathConfiguration="&{false false false false false }" interface=lxc8c31405a7daa k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ea7d75668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ea7d75668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2ea7d75668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identity=18585 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ea7d75668 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3701 identity=18585 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e0f780fc6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1606 identity=18058 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e0f780fc6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1606 identity=18058 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2ea7d75668 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3701 identity=18585 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ea7d75668 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3701 identity=18585 ipv4=10.0.0.240 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.109 329eec9b-7f13-47bf-ab64-702120be686b default }" containerID=df44aa4d251e243026d3cad04727572fadc483e2682e37d38ff09cdd6239ebeb datapathConfiguration="&{false false false false false }" interface=lxcf6a0203a1f1f k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=df44aa4d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=df44aa4d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=df44aa4d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=df44aa4d25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1938 identity=55479 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=df44aa4d25 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1938 identity=55479 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=endpoint level=info msg="Successful endpoint creation" containerID=df44aa4d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=55479 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 7d8bf36f-18d3-4219-9be6-4e5a6e7a16be default }" containerID=bb12c6a9574f32f630c59db1994dfdbeed16d50d0d8c7a270f3b9b3f1cdf0e4c datapathConfiguration="&{false false false false false }" interface=lxc611577885842 k8sPodName=monitoring/vector-t4hn6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb12c6a957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb12c6a957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb12c6a957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=33924 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb12c6a957 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3358 identity=33924 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb12c6a957 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3358 identity=33924 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb12c6a957 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3358 identity=33924 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-t4hn6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=df44aa4d25 endpointID=1938 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=df44aa4d25 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1938 identity=55479 ipv4=10.0.0.109 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f0eb5071-08a7-4785-a035-0ea9e77139da subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 e5a73f35-d0a1-4f5a-8029-f738a04a3c99 default }" containerID=64760a85fb70d45f3b6af2cac318e224d89fc45144914edf74fc868a74346de3 datapathConfiguration="&{false false false false false }" interface=lxcba06acd4fe9d k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64760a85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64760a85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64760a85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=6375 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=64760a85fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=6375 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 1527d189-8c2e-46e6-91d2-7ebd5967191d default }" containerID=6607d862800b2eff990565937cdd417bcefa2a03ea86f1bdc00deaabb65358c4 datapathConfiguration="&{false false false false false }" interface=lxc55c52d4905ad k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6607d86280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6607d86280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6607d86280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=3852 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6607d86280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3304 identity=3852 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64760a85fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=372 identity=6375 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=64760a85fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=372 identity=6375 ipv4=10.0.0.155 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-7lkkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6607d86280 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3304 identity=3852 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6607d86280 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3304 identity=3852 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 8fe5e5c8-eb5c-4564-ba3f-f55d24c7949f default }" containerID=acb446315c68b91e7f8dfa3cab74d0a4bc42c4a0b18ae6900292e27506ffba2a datapathConfiguration="&{false false false false false }" interface=lxcca65f608a7b0 k8sPodName=openstack/memcached-memcached-6479589586-d7trh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=24657 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=24657 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acb446315c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3687 identity=24657 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh subsys=endpoint level=info msg="Successful endpoint creation" containerID=acb446315c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3687 identity=24657 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-d7trh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 306b4f2d-8b9e-40a1-93c6-a2ba8ea6da4d default }" containerID=5fb15d586ce02b96ce030f5e613190439d71bee70b03e83a97af2e9004b990d0 datapathConfiguration="&{false false false false false }" interface=lxc7418b98cc494 k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5fb15d586c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5fb15d586c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5fb15d586c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5fb15d586c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=55479 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5fb15d586c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=986 identity=55479 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5fb15d586c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=55479 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=daemon level=info msg="Delete endpoint request" containerID=5fb15d586c endpointID=986 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5fb15d586c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=986 identity=55479 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2778e94f-4699-4c4c-a30c-d8265452f033 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 336dd82c-e96a-4343-92ed-bba2dd330fd2 default }" containerID=bfd56f8be5e7890f1c75551c1d2b0be90a49399143274d657484923a239429c4 datapathConfiguration="&{false false false false false }" interface=lxcc9a412a18b92 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=54523 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=335 identity=54523 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfd56f8be5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=335 identity=54523 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfd56f8be5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=335 identity=54523 ipv4=10.0.0.193 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.10 cab306b8-87a1-4612-b07f-be1fe17b2015 default }" containerID=637dab99dde229b3fb5ad58e2adef10bfc47457f2e8d42e995e3c507353d6db9 datapathConfiguration="&{false false false false false }" interface=lxc7f96ad7d6c0c k8sPodName=openstack/keystone-api-64b956db5b-2jj5l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2497 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2497 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2497 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2497 identity=22509 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2497 identity=22509 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 8a47f9d3-f15d-4196-8674-8411ec0af755 default }" containerID=f8bde5dc4d66cf1a4b651ac7358a3d5a8f30fccacb10e0cad17afec4da7f82f1 datapathConfiguration="&{false false false false false }" interface=lxcbe568a3f8b56 k8sPodName=openstack/keystone-credential-setup-vwlfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8bde5dc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8bde5dc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8bde5dc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=315 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8bde5dc4d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=315 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=637dab99dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2497 identity=22509 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l subsys=endpoint level=info msg="Successful endpoint creation" containerID=637dab99dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2497 identity=22509 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-api-64b956db5b-2jj5l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8bde5dc4d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2295 identity=315 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8bde5dc4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=315 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f8bde5dc4d endpointID=2295 k8sNamespace=openstack k8sPodName=keystone-credential-setup-vwlfr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e4e0d62c-c407-4f19-b065-19094aa8f8c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f8bde5dc4d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=315 ipv4=10.0.0.50 ipv6= k8sPodName=openstack/keystone-credential-setup-vwlfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.180 fd1fea2f-4fb8-4dcd-ba48-78bc78c55819 default }" containerID=b28bf205ee202c25746b0e774be2cb38d23149a41cf16307e065a715a90dff70 datapathConfiguration="&{false false false false false }" interface=lxc61864c038ced k8sPodName=openstack/keystone-db-init-j2ldd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b28bf205ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b28bf205ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b28bf205ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=21732 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b28bf205ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=22 identity=21732 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b28bf205ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=22 identity=21732 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=endpoint level=info msg="Successful endpoint creation" containerID=b28bf205ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=21732 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b28bf205ee endpointID=22 k8sNamespace=openstack k8sPodName=keystone-db-init-j2ldd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=c15828b4-d770-4e14-9fbc-00720d6042a3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b28bf205ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=22 identity=21732 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/keystone-db-init-j2ldd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 e9025145-2df0-4282-a2f1-93c6df2e1892 default }" containerID=d272eaa0e6b7c65092a5ee6d2127414337f8364ef3a581a1182124f8e6d9c909 datapathConfiguration="&{false false false false false }" interface=lxc67a975033d07 k8sPodName=openstack/keystone-fernet-setup-gs6gd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d272eaa0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d272eaa0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d272eaa0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identity=52851 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d272eaa0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4004 identity=52851 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d272eaa0e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4004 identity=52851 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=endpoint level=info msg="Successful endpoint creation" containerID=d272eaa0e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4004 identity=52851 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d272eaa0e6 endpointID=4004 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-gs6gd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=381c081a-1dde-4efd-8a02-1f380d82f2ba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d272eaa0e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4004 identity=52851 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-fernet-setup-gs6gd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 0ba90656-beb6-4601-a374-2bfbafeabbd8 default }" containerID=91e744b4dbbf1dbe5f20faa9162b271ff54366ec597dc858d09531997ed67e6e datapathConfiguration="&{false false false false false }" interface=lxc595227cd687a k8sPodName=openstack/keystone-db-sync-8b82v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=91e744b4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=91e744b4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=91e744b4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=33686 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=91e744b4db datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1228 identity=33686 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=91e744b4db datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1228 identity=33686 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=endpoint level=info msg="Successful endpoint creation" containerID=91e744b4db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=33686 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=daemon level=info msg="Delete endpoint request" containerID=91e744b4db endpointID=1228 k8sNamespace=openstack k8sPodName=keystone-db-sync-8b82v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=8c874001-fd26-4403-8ad0-a85d7e8a4322 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=91e744b4db datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1228 identity=33686 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/keystone-db-sync-8b82v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.188 3e528034-b328-433e-814a-071378419077 default }" containerID=586218120958953bbf534381e65010c4145cc0ba7b904ccc3915e4066701ebc5 datapathConfiguration="&{false false false false false }" interface=lxc624fe71dfc9c k8sPodName=openstack/keystone-rabbit-init-j9jl6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5862181209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5862181209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2176f57-8097-4271-b5f4-523d9df68193,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e2176f57-8097-4271-b5f4-523d9df68193,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e2176f57-8097-4271-b5f4-523d9df68193;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e2176f57-8097-4271-b5f4-523d9df68193;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5862181209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=62714 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e2176f57-8097-4271-b5f4-523d9df68193,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e2176f57-8097-4271-b5f4-523d9df68193,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5862181209 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=74 identity=62714 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5862181209 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=74 identity=62714 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5862181209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=62714 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5862181209 endpointID=74 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-j9jl6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e2176f57-8097-4271-b5f4-523d9df68193 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e2176f57-8097-4271-b5f4-523d9df68193 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5862181209 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=74 identity=62714 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-rabbit-init-j9jl6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.146 3b5071e8-6e05-495f-b5cf-0d5267d8f57e default }" containerID=34514223e43f153cde9256ded5b413ce635d164b53af0c211ba19c0b833a7e09 datapathConfiguration="&{false false false false false }" interface=lxcd0ec2dbe3949 k8sPodName=openstack/keystone-domain-manage-jt6v2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34514223e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34514223e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34514223e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=9143 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34514223e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=9143 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34514223e4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=9143 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=34514223e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=9143 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=34514223e4 endpointID=8 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jt6v2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=425c28e1-90ed-4c15-b064-74aba8f25e0c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=34514223e4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=9143 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/keystone-domain-manage-jt6v2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 d9ca612a-2a0f-4b60-9c13-1112fdad89a9 default }" containerID=45c1c681e8c365b6efdda941e273f8ac373b641cdad118a28940703cf8b245b2 datapathConfiguration="&{false false false false false }" interface=lxce2359b2f7dba k8sPodName=openstack/keystone-bootstrap-j5r89 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45c1c681e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45c1c681e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45c1c681e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=57207 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=45c1c681e8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=166 identity=57207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45c1c681e8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=166 identity=57207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45c1c681e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=57207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45c1c681e8 endpointID=166 k8sNamespace=openstack k8sPodName=keystone-bootstrap-j5r89 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=54716c5a-c2e6-44e0-ab1f-d199465f4fdf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=45c1c681e8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=166 identity=57207 ipv4=10.0.0.67 ipv6= k8sPodName=openstack/keystone-bootstrap-j5r89 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 f5e7189d-0a91-49e1-818c-c11f72781125 default }" containerID=10f09b29f30b7ca6decd7d73192dc37901767890c2de713228773bd7c3b1c566 datapathConfiguration="&{false false false false false }" interface=lxc4c3700dd938d k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10f09b29f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10f09b29f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=10f09b29f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10f09b29f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=860 identity=55479 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10f09b29f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=860 identity=55479 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=endpoint level=info msg="Successful endpoint creation" containerID=10f09b29f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=860 identity=55479 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=daemon level=info msg="Delete endpoint request" containerID=10f09b29f3 endpointID=860 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=10f09b29f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=860 identity=55479 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1a1920ad-0bf4-4416-a00c-e62fa366e614 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.102 3977b781-b26d-4ee5-94cd-4d8fbc5a37ff default }" containerID=bc555697b166a46256b66d1531c1595c29ca9c7d4068717d44c423e795b2a0e7 datapathConfiguration="&{false false false false false }" interface=lxceed712732c83 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=4483 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=543 identity=4483 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc555697b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=543 identity=4483 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc555697b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=543 identity=4483 ipv4=10.0.0.102 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.197 1522fc5a-0359-4a66-8346-7b70a262456c default }" containerID=8a8f14cfe54852f66eba0cdeeb79853a99bc05b1e9bcd47378476de3c4518067 datapathConfiguration="&{false false false false false }" interface=lxccaab0332ba64 k8sPodName=openstack/barbican-api-b458c45d9-vlvcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a8f14cfe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a8f14cfe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a8f14cfe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=27005 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a8f14cfe5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3569 identity=27005 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 0dcf250b-21ed-4f3c-b233-f80e6782564c default }" containerID=96fe7a618ee3483ae515f5ec2965ae6665364d8838643f04cdfd4bf94fd9ebe6 datapathConfiguration="&{false false false false false }" interface=lxcf519ca9a6bfa k8sPodName=openstack/barbican-db-init-7m7sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96fe7a618e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96fe7a618e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96fe7a618e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=56003 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96fe7a618e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1970 identity=56003 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a8f14cfe5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3569 identity=27005 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a8f14cfe5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3569 identity=27005 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-api-b458c45d9-vlvcm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=96fe7a618e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1970 identity=56003 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=96fe7a618e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1970 identity=56003 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96fe7a618e endpointID=1970 k8sNamespace=openstack k8sPodName=barbican-db-init-7m7sw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=1cf92c66-b968-4df2-890c-bfb5448024b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=96fe7a618e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1970 identity=56003 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/barbican-db-init-7m7sw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 f400c787-8937-4745-b46f-3cbeb12d47ae default }" containerID=568cf54d80596b25daf64313a11121fb79007885ad2e8556bdcb4cf6833bc26b datapathConfiguration="&{false false false false false }" interface=lxc7c7413e5a732 k8sPodName=openstack/barbican-db-sync-wklvk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=568cf54d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=568cf54d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=568cf54d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=24297 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=568cf54d80 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=24297 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=568cf54d80 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2931 identity=24297 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=endpoint level=info msg="Successful endpoint creation" containerID=568cf54d80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=24297 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03606598401125435 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=568cf54d80 endpointID=2931 k8sNamespace=openstack k8sPodName=barbican-db-sync-wklvk subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b1bf5b4b-c7d8-4d53-b49f-44ca95bce8f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=568cf54d80 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=24297 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/barbican-db-sync-wklvk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 371ec097-979c-45f8-b4cd-2ce0329708c9 default }" containerID=94ad5c8daf7c4d192602151008008bd90f53de3da3c3619197e176f56603ff00 datapathConfiguration="&{false false false false false }" interface=lxc002c1758847c k8sPodName=openstack/barbican-rabbit-init-hxtq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94ad5c8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94ad5c8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=94ad5c8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=28095 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94ad5c8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1996 identity=28095 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94ad5c8daf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1996 identity=28095 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=94ad5c8daf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1996 identity=28095 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94ad5c8daf endpointID=1996 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-hxtq6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=e9a1b942-17c9-453b-b8d4-23374eecfbe5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=94ad5c8daf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1996 identity=28095 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/barbican-rabbit-init-hxtq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 73320223-1750-4743-8aaf-6db8b6f7f6b6 default }" containerID=e7186ad60c8646937f44a36e5397d6d0ccf59e5c275ac3bd210699de18eccd2d datapathConfiguration="&{false false false false false }" interface=lxc79978d587321 k8sPodName=openstack/barbican-ks-service-55nkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7186ad60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7186ad60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7186ad60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identity=24153 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7186ad60c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2822 identity=24153 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e7186ad60c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2822 identity=24153 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7186ad60c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2822 identity=24153 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7186ad60c endpointID=2822 k8sNamespace=openstack k8sPodName=barbican-ks-service-55nkw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=76e45e75-be46-42e8-b6b8-7a5b053dae1c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e7186ad60c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2822 identity=24153 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/barbican-ks-service-55nkw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 0f74e9f6-271a-40ae-9ca6-f39fd9f0bc5c default }" containerID=8c5883bd94f8de403e2327b39b6e02eea4a2dbcc93d05c9347c9fb46a942ed7c datapathConfiguration="&{false false false false false }" interface=lxc0341c4c7b403 k8sPodName=openstack/barbican-ks-endpoints-cd54l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c5883bd94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c5883bd94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c5883bd94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=10612 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c5883bd94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1452 identity=10612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8c5883bd94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1452 identity=10612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c5883bd94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1452 identity=10612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8c5883bd94 endpointID=1452 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-cd54l subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c38b2312-d18b-444d-bc12-a0ac3c3efb73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8c5883bd94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1452 identity=10612 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-ks-endpoints-cd54l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 d4843716-84ee-484e-99c0-07029a522a7e default }" containerID=754c24fc3b41f502163f7aca4af1d03d52427ed25a431ca97bc5deca38191dc6 datapathConfiguration="&{false false false false false }" interface=lxc5609dbde3f82 k8sPodName=openstack/barbican-ks-user-xntcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=754c24fc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=754c24fc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=754c24fc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=5240 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=754c24fc3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=5240 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=754c24fc3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2295 identity=5240 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=754c24fc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=5240 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=754c24fc3b endpointID=2295 k8sNamespace=openstack k8sPodName=barbican-ks-user-xntcg subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b2c3fadf-0958-4fe8-87be-6ff80611e3db k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=754c24fc3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2295 identity=5240 ipv4=10.0.0.83 ipv6= k8sPodName=openstack/barbican-ks-user-xntcg subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.5 21a245aa-c049-493f-a73e-13ccf037fdcc default }" containerID=316a8374b01b288e9487c913c921ae9aedeb2909d9c1cd2c12a96e715a510cf2 datapathConfiguration="&{false false false false false }" interface=lxce14b583684b9 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=316a8374b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=316a8374b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=316a8374b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=33728 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=316a8374b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=33728 ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=316a8374b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=419 identity=33728 ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl subsys=endpoint level=info msg="Successful endpoint creation" containerID=316a8374b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=33728 ipv4=10.0.0.5 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-2w5sl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.238 88e73804-f77a-461d-a823-8a7cd46976f5 default }" containerID=37ed9a32f5c49be5b62bb5729993c4d99e0ff2e9cb0907fba1c9c5b90d57dd55 datapathConfiguration="&{false false false false false }" interface=lxc1e147bdaf4e3 k8sPodName=openstack/rook-ceph-detect-version-pgm25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37ed9a32f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37ed9a32f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=37ed9a32f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=58706 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37ed9a32f5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=763 identity=58706 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37ed9a32f5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=763 identity=58706 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=37ed9a32f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=58706 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=37ed9a32f5 endpointID=763 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-pgm25 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=81f43d6a-cd47-49d5-ab4d-38fca2607bba k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=37ed9a32f5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=763 identity=58706 ipv4=10.0.0.238 ipv6= k8sPodName=openstack/rook-ceph-detect-version-pgm25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 ea5a5cda-f83d-4ced-956b-4684474622c3 default }" containerID=ee2b68bc8bef7e81bef0ad15f872f87556150629279a04bdf0c4f79b7c41a727 datapathConfiguration="&{false false false false false }" interface=lxca1d894029fa4 k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee2b68bc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee2b68bc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee2b68bc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=2435 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee2b68bc8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=35 identity=2435 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee2b68bc8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=35 identity=2435 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee2b68bc8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=2435 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ee2b68bc8b endpointID=35 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-l5fsb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=65ed9e91-fc4b-4530-a7a5-a2052e9927f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=ee2b68bc8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=35 identity=2435 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l5fsb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 0c23519c-cf86-4e25-aeac-126a07fe0adc default }" containerID=d300940986f87cb1b35e398fa7c70519861ef60c3b0b9a62cd128779c3a4efbb datapathConfiguration="&{false false false false false }" interface=lxc952198d5340a k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d300940986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d300940986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d300940986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=55479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d300940986 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=55479 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d300940986 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=243 identity=55479 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=endpoint level=info msg="Successful endpoint creation" containerID=d300940986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=55479 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=daemon level=info msg="Delete endpoint request" containerID=d300940986 endpointID=243 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d300940986 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=243 identity=55479 ipv4=10.0.0.59 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-92a3b069-9332-4b5f-944c-6ec55109909e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 7a59a938-4bd6-4d74-aaa5-33e4600344df default }" containerID=3b1a7a2a54b55f861477b729aaff84f67cacb480b8dc43ffbd918dbe003c83c3 datapathConfiguration="&{false false false false false }" interface=lxc004b70a9f709 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b1a7a2a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b1a7a2a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b1a7a2a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=20566 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3b1a7a2a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=598 identity=20566 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b1a7a2a54 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=598 identity=20566 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b1a7a2a54 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=598 identity=20566 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.140 4ef76f4a-1a87-4bb2-a8da-816e36b1f616 default }" containerID=c3968263a36622743a92fed05370c236b831dcac59070da63360266b66067122 datapathConfiguration="&{false false false false false }" interface=lxcb8d68e262433 k8sPodName=openstack/glance-db-init-vlwzt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3968263a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3968263a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3968263a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=49773 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3968263a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=49773 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c3968263a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=194 identity=49773 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3968263a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=49773 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3968263a3 endpointID=194 k8sNamespace=openstack k8sPodName=glance-db-init-vlwzt subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=cd77e5f0-a5e3-4337-af79-607ed649b531 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=c3968263a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=194 identity=49773 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/glance-db-init-vlwzt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 c11f8e03-3130-4d0c-8f2d-3cc15634a51c default }" containerID=4747b00dd7522f0c098e56ebbf32dc9841196caea1a3cd19582290fc1cccf55e datapathConfiguration="&{false false false false false }" interface=lxca84e63057f4e k8sPodName=openstack/glance-db-sync-nzfcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4747b00dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4747b00dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4747b00dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=24112 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4747b00dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2784 identity=24112 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4747b00dd7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2784 identity=24112 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=4747b00dd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=24112 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 7b29a3c3-6e56-4706-8964-1b190ea4cae1 default }" containerID=3892cc5e310fca682d59fc53792df8942e2d7d2aceb2608654b9ea79eefe547e datapathConfiguration="&{false false false false false }" interface=lxcb5fc10e28fc4 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3892cc5e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3892cc5e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3892cc5e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=60479 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3892cc5e31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3213 identity=60479 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 499d4c5c-81be-452c-bad9-8d6505db44c5 default }" containerID=1eeafb74c455178a2329750df8634ed3582111913d27232eb761675f9666a348 datapathConfiguration="&{false false false false false }" interface=lxca828aa30f32d k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1eeafb74c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1eeafb74c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1eeafb74c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=47891 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1eeafb74c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=172 identity=47891 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3892cc5e31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3213 identity=60479 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3892cc5e31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3213 identity=60479 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-lx2zw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1eeafb74c4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=172 identity=47891 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1eeafb74c4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=172 identity=47891 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-8l5n2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4747b00dd7 endpointID=2784 k8sNamespace=openstack k8sPodName=glance-db-sync-nzfcq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=87f7e134-666b-4b1e-8400-752863c01a7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4747b00dd7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2784 identity=24112 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/glance-db-sync-nzfcq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 81099a3f-af31-478c-946b-2a463d1bd05f default }" containerID=ae3a6aa4ff5a30606476c9880f935c068efaa3add15b73eb2274981353b84ac7 datapathConfiguration="&{false false false false false }" interface=lxc23edc6d4efc7 k8sPodName=openstack/glance-rabbit-init-4sscd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae3a6aa4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae3a6aa4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae3a6aa4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=32586 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ae3a6aa4ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1520 identity=32586 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ae3a6aa4ff datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1520 identity=32586 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae3a6aa4ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1520 identity=32586 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae3a6aa4ff endpointID=1520 k8sNamespace=openstack k8sPodName=glance-rabbit-init-4sscd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ba7da266-5823-4729-8a84-63b7a7e1ea38 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ae3a6aa4ff datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1520 identity=32586 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/glance-rabbit-init-4sscd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 27b1adc5-1572-4a2a-be79-8a338517d61e default }" containerID=d87abab546009f781227dd1d9aff6ea210e7032823f910b8a3982c933f7b0cc0 datapathConfiguration="&{false false false false false }" interface=lxc00f080df25b0 k8sPodName=openstack/glance-ks-service-drcqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d87abab546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d87abab546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d87abab546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=54209 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d87abab546 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=322 identity=54209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d87abab546 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=322 identity=54209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=d87abab546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=54209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d87abab546 endpointID=322 k8sNamespace=openstack k8sPodName=glance-ks-service-drcqc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=076057d6-04b9-4b76-9a33-a2523cfd4abf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d87abab546 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=322 identity=54209 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/glance-ks-service-drcqc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 d18d9ad1-47c1-4aed-bdd0-129203d8c5c8 default }" containerID=238bcfaba21e87d185cf451ef004b24b3698e67619ad2f0e741cb2265302557d datapathConfiguration="&{false false false false false }" interface=lxc1ffe9ba88a59 k8sPodName=openstack/glance-ks-endpoints-g2nr4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=238bcfaba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=238bcfaba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=238bcfaba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=22681 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=238bcfaba2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1365 identity=22681 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=238bcfaba2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1365 identity=22681 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=238bcfaba2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=22681 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=238bcfaba2 endpointID=1365 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-g2nr4 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=eabdc7f8-a6ef-4a7b-a6d0-3edd60ce47ed k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=238bcfaba2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1365 identity=22681 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/glance-ks-endpoints-g2nr4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 cdb5fba5-5044-4e32-92c0-3057ace2c840 default }" containerID=80ac80cc1eef9e99dbe6137adbcb280f53500e0743e89d2b33b87609cf7b7be7 datapathConfiguration="&{false false false false false }" interface=lxc1595d225be27 k8sPodName=openstack/glance-ks-user-6rpqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80ac80cc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80ac80cc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80ac80cc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=30758 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80ac80cc1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2298 identity=30758 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=80ac80cc1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2298 identity=30758 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=80ac80cc1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=30758 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=80ac80cc1e endpointID=2298 k8sNamespace=openstack k8sPodName=glance-ks-user-6rpqr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=238e4769-f10e-431d-8354-1ff5d9d28be9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=80ac80cc1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2298 identity=30758 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/glance-ks-user-6rpqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 8658b380-c02d-4f47-b823-b469e9af40a9 default }" containerID=2cd681138d87e2b77756adcc815b77b8ac4999de157416b27058a3bcba406ddf datapathConfiguration="&{false false false false false }" interface=lxc75740fbc2947 k8sPodName=openstack/glance-metadefs-load-94t22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2cd681138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2cd681138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2cd681138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=13711 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2cd681138d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2330 identity=13711 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2cd681138d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2330 identity=13711 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2cd681138d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=13711 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2cd681138d endpointID=2330 k8sNamespace=openstack k8sPodName=glance-metadefs-load-94t22 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=f75bf242-09d4-45c7-bc57-69307f468f37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2cd681138d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2330 identity=13711 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-metadefs-load-94t22 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.156 e79f1321-d2cc-4ce3-b2d9-414d37739305 default }" containerID=24f2cdc78bfe83857b2669bd1a58e7da82bd9e25e6c39e37ac7700b39ffe6fa8 datapathConfiguration="&{false false false false false }" interface=lxccb7ddbe76b80 k8sPodName=openstack/glance-storage-init-7rd8r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24f2cdc78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24f2cdc78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24f2cdc78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=3914 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=24f2cdc78b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2430 identity=3914 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24f2cdc78b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2430 identity=3914 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=endpoint level=info msg="Successful endpoint creation" containerID=24f2cdc78b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=3914 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24f2cdc78b endpointID=2430 k8sNamespace=openstack k8sPodName=glance-storage-init-7rd8r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=12b729e7-d80c-49d6-ad8b-89374751dd24 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=24f2cdc78b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2430 identity=3914 ipv4=10.0.0.156 ipv6= k8sPodName=openstack/glance-storage-init-7rd8r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 3fb07752-9ff2-473a-a8de-a313a44ba9a4 default }" containerID=019d9da0996378a8584bc44e99740b48dedf5d52b2bd2992115789e8aef075e5 datapathConfiguration="&{false false false false false }" interface=lxc31b2bc0536e8 k8sPodName=openstack/glance-api-5bc65c8978-r664b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=9223 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=124 identity=9223 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=019d9da099 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=124 identity=9223 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b subsys=endpoint level=info msg="Successful endpoint creation" containerID=019d9da099 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=124 identity=9223 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/glance-api-5bc65c8978-r664b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 bcfd0813-ad34-4564-a74e-1847623befea default }" containerID=3b20dcc0e6795c05cc734ffd4ef4130a04cc847912765bf0960a48f758af0dea datapathConfiguration="&{false false false false false }" interface=lxc98a08d387d93 k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=53866 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1458 identity=53866 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 fd20d4a0-759f-4d75-a8f0-7a418d2cd846 default }" containerID=d1ac961b37630972e5c63184e51b4b9644ef6af7ea7e980b857fd919a0e6a61f datapathConfiguration="&{false false false false false }" interface=lxca5d80e7c162b k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1ac961b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1ac961b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1ac961b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=28215 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1ac961b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3708 identity=28215 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b20dcc0e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1458 identity=53866 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b20dcc0e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1458 identity=53866 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-api-64cdf57f8d-pq4bx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 a1b26e5a-9c06-4360-afac-01bb01add1a1 default }" containerID=c0e977da4379349b5205c1fe1604331ea748583907cc9098f5a5fd949699cc18 datapathConfiguration="&{false false false false false }" interface=lxcc9076423a0ac k8sPodName=openstack/staffeln-db-init-482pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0e977da43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0e977da43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0e977da43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=33439 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0e977da43 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3606 identity=33439 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1ac961b37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3708 identity=28215 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1ac961b37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3708 identity=28215 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/staffeln-conductor-597c64cbf5-cg87p subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c0e977da43 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3606 identity=33439 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0e977da43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=33439 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c0e977da43 endpointID=3606 k8sNamespace=openstack k8sPodName=staffeln-db-init-482pp subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=8ad46511-7efa-420c-812d-55f8cd09c1c5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=c0e977da43 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3606 identity=33439 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-db-init-482pp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.132 77596caa-e9f6-42b6-bf57-f5a8c0a5b716 default }" containerID=0ac3abd11c0cbc25ff913ea23289761d65a2af5f0b322955928473046fc2feba datapathConfiguration="&{false false false false false }" interface=lxc7dd0f644f50d k8sPodName=openstack/staffeln-db-sync-9hjrn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ac3abd11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ac3abd11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ac3abd11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=10877 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=0f57899d-a028-47c1-8f96-9366992bffd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0ac3abd11c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2397 identity=10877 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ac3abd11c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2397 identity=10877 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ac3abd11c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2397 identity=10877 ipv4=10.0.0.132 ipv6= k8sPodName=openstack/staffeln-db-sync-9hjrn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager