level=info msg="Memory available for map entries (0.003% of 16764960768B): 41912401B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="828.34µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="45.361µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="835.309µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.45µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.321139ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="9.86µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="28.311µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="64.982µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="50.291µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="58.772µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="415.65µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.34µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.335028ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.868085ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="109.903µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="113.032µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="400.529µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="218.435µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="125.293µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.373491ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="189.125µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="23.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.124.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.10873ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="17.961µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=200.682656ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="5.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.375615ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="7.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.95µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="21.461µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="9.601µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="60.811µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="793.629µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.511µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.38µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="239.715µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="667.966µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.293939ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.73µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.95µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.124 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.124 ipAddr.ipv6="" k8sNodeIP=199.19.213.124 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.124" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.110" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.124" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.124} {CiliumInternalIP 10.0.0.110}] 10.0.0.0/24 [] [] 10.0.0.108 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:41599" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.420985525s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="24.071µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="6.4µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="50.321µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="20.361µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=272 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.432511775s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.184 9bfa4b31-6b22-4d42-b2b7-a27a4cdad916 default }" containerID=cc7e9000c6b9bda0ac172beab59bd3c312031ee68e65c784b52109e51aaf8648 datapathConfiguration="&{false false false false false }" interface=lxcf4b11e731fa1 k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=32044 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=491 identity=32044 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 9f4f7c54-096f-422f-9bdb-c00a005b2d42 default }" containerID=f4855b6659193d4f003c630b1aa7b113eebb8d7df48aee77b9a8acac1f35c1ef datapathConfiguration="&{false false false false false }" interface=lxc68736c2f3a38 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f4855b6659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f4855b6659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0641d764-66f4-4758-949a-9bd5a691897a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0641d764-66f4-4758-949a-9bd5a691897a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=0641d764-66f4-4758-949a-9bd5a691897a;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=0641d764-66f4-4758-949a-9bd5a691897a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f4855b6659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=7848 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=0641d764-66f4-4758-949a-9bd5a691897a,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=0641d764-66f4-4758-949a-9bd5a691897a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f4855b6659 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1866 identity=7848 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=323.524131ms file-path=/var/run/cilium/state/templates/8cb74a0ee18a6f694dc6018178f15c2c701d71ca2d6a59450e720cfabcc2f2ac/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=272 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identityLabels="reserved:health" ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2291 identity=4 identityLabels="reserved:health" ipv4=10.0.0.108 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.090010376s file-path=/var/run/cilium/state/templates/2645aea56db51b2db664f7b33814c9ec0e26b05595f851fc7830e533320befda/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=f4855b6659 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1866 identity=7848 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=f4855b6659 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1866 identity=7848 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2291 identity=4 ipv4=10.0.0.108 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc7e9000c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=491 identity=32044 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc7e9000c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=491 identity=32044 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f4855b6659 endpointID=1866 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ksf2w subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=0641d764-66f4-4758-949a-9bd5a691897a k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=0641d764-66f4-4758-949a-9bd5a691897a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=f4855b6659 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1866 identity=7848 ipv4=10.0.0.17 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ksf2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 4eaf2a7f-4322-41e4-8bf3-20f5a5abee56 default }" containerID=700b299068a3690a26f14f62359f8228b2d25bd91699b7981af1657f11dfc89a datapathConfiguration="&{false false false false false }" interface=lxc4d67f769ece3 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=45625 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1756 identity=45625 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=700b299068 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1756 identity=45625 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn subsys=endpoint level=info msg="Successful endpoint creation" containerID=700b299068 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1756 identity=45625 ipv4=10.0.0.3 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-56vxn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=272 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00272 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00272 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00272 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00272:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=272 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 835db7a8-274a-4754-a0f6-111811da309d default }" containerID=f671e0427a95b9b75ec3661278c8f928690cf9fb98a3bfa14a83d9366dfa987e datapathConfiguration="&{false false false false false }" interface=lxc382326c39a0e k8sPodName=kube-system/coredns-67659f764b-n7kgv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f671e0427a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f671e0427a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f671e0427a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=32044 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f671e0427a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1291 identity=32044 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 f286e89a-7074-4cd7-ad76-15bb3367bb9a default }" containerID=fde7dc83aa1899d83aa358a6cf93dc7ff753e274675b8532d123e970526bac66 datapathConfiguration="&{false false false false false }" interface=lxc16f8b326a15f k8sPodName=kube-system/coredns-67659f764b-c97sw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fde7dc83aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fde7dc83aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=fde7dc83aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=32044 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fde7dc83aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=262 identity=32044 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f671e0427a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1291 identity=32044 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f671e0427a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1291 identity=32044 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-67659f764b-n7kgv subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fde7dc83aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=262 identity=32044 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw subsys=endpoint level=info msg="Successful endpoint creation" containerID=fde7dc83aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=262 identity=32044 ipv4=10.0.0.94 ipv6= k8sPodName=kube-system/coredns-67659f764b-c97sw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.75 a8196761-b0ae-4fe2-b266-7248de888374 default }" containerID=2137d81570aaef85f6b9072fba26f6895c832a0cb579d88d9c1ece50dcc7ea0e datapathConfiguration="&{false false false false false }" interface=lxc69d46a479dd3 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2137d81570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2137d81570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2137d81570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=51682 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2137d81570 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1364 identity=51682 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2137d81570 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1364 identity=51682 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2137d81570 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1364 identity=51682 ipv4=10.0.0.75 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xzwr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc7e9000c6 endpointID=491 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-2r4p5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=cc7e9000c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=491 identity=32044 ipv4=10.0.0.184 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-2r4p5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 3bb59756-2ae5-4781-ba87-82a13863e11c default }" containerID=31d39a87c894a80cc32f017beb25e05ff9b34cdd30aadf80956a93a9eefd4b8a datapathConfiguration="&{false false false false false }" interface=lxcd8972e0c4154 k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31d39a87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31d39a87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31d39a87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=29290 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31d39a87c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=29290 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=31d39a87c8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2985 identity=29290 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=endpoint level=info msg="Successful endpoint creation" containerID=31d39a87c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2985 identity=29290 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.19 da3d6cc6-7988-497b-b862-1c78c496c89b default }" containerID=e4b608863df109156ccc49a369b05742aec96a11f0e4b6e17fb119ffc3a0b3e4 datapathConfiguration="&{false false false false false }" interface=lxce3824d595c49 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4b608863d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4b608863d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4b608863d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=8907 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4b608863d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3131 identity=8907 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 602b0e21-7228-406a-a92a-f140a2706c57 default }" containerID=289de45b13f2770b7b429d1e9509b0ed7dae7f872e1a2690576cac91ce231087 datapathConfiguration="&{false false false false false }" interface=lxca9d4f8e8fc09 k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=289de45b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=289de45b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.6 a39ad090-c550-4d06-9ebd-dd8fba2949e9 default }" containerID=079f4b444984328eb5d763c0d4bafd8bb7e327f15bb38b85dbce6df8099979b2 datapathConfiguration="&{false false false false false }" interface=lxc1e17ebdd03f6 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=079f4b4449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=079f4b4449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=289de45b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=45263 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=289de45b13 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=209 identity=45263 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=079f4b4449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=36219 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=079f4b4449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=36219 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e4b608863d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3131 identity=8907 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4b608863d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3131 identity=8907 ipv4=10.0.0.19 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-ch5ks subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=289de45b13 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=209 identity=45263 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t subsys=endpoint level=info msg="Successful endpoint creation" containerID=289de45b13 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=209 identity=45263 ipv4=10.0.0.119 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-f9s6t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=079f4b4449 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2197 identity=36219 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=079f4b4449 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2197 identity=36219 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-8fx74 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31d39a87c8 endpointID=2985 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-5j9wn subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=be25d370-8b8d-49a9-9478-1e75e6299f80 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=31d39a87c8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2985 identity=29290 ipv4=10.0.0.124 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-5j9wn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 ba1f73d3-9c55-47a3-a624-f3b77cb64200 default }" containerID=bcdf9fcedf475e3e87f0666380ee6f168b43f39cb43c24e8d715203719e7c8ce datapathConfiguration="&{false false false false false }" interface=lxc70a22b6a66ba k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bcdf9fcedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bcdf9fcedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bcdf9fcedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=35394 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bcdf9fcedf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1395 identity=35394 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bcdf9fcedf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1395 identity=35394 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=bcdf9fcedf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1395 identity=35394 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bcdf9fcedf endpointID=1395 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-rprmj subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=91d914d8-4a8f-4a1c-9252-81be184aa926 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=bcdf9fcedf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1395 identity=35394 ipv4=10.0.0.59 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-rprmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.1 a0ac6fbf-05ea-4d8e-974f-9ffd21bdd26f default }" containerID=052b7b07a575b20acec9724240ff6ae7eaec53c97e975b293725a2c8a5540e64 datapathConfiguration="&{false false false false false }" interface=lxc8666b5c2b9d3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=052b7b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=052b7b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=052b7b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=12657 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=052b7b07a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=39 identity=12657 ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=052b7b07a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=39 identity=12657 ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=052b7b07a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=39 identity=12657 ipv4=10.0.0.1 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-jkcp6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.222 bb8151a1-394e-4c52-85a9-256376a0aa08 default }" containerID=29c363e446982cc5d5bef98b970001d9ddd00bdc11924d974897e54ccb2c3061 datapathConfiguration="&{false false false false false }" interface=lxcf802312dddce k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29c363e446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29c363e446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29c363e446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=20608 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29c363e446 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=837 identity=20608 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29c363e446 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=837 identity=20608 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=29c363e446 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=837 identity=20608 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=29c363e446 endpointID=837 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-xptxg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=7548c8ec-7ecc-45ed-a19e-2d18b695d99c k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=29c363e446 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=837 identity=20608 ipv4=10.0.0.222 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-xptxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 6f990205-9bb1-4285-9294-ca2f6e9fca7c default }" containerID=5f53b481914dbe53333d63fb9e35fd3b50d6441e6b76a32d86d73dc0b77b86b0 datapathConfiguration="&{false false false false false }" interface=lxc59e171435726 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f53b48191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f53b48191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5f53b48191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=18962 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f53b48191 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=18962 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f53b48191 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=423 identity=18962 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f53b48191 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=423 identity=18962 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-4rshh subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 3d773088-04e1-4312-82cf-f9b3d56cc71c default }" containerID=6a3392e912748928ad3e4f2fd969adb56e85d3d81a6528a3d18ee2d6046956dc datapathConfiguration="&{false false false false false }" interface=lxcce60dc289cac k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a3392e912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a3392e912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a3392e912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=10761 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a3392e912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=217 identity=10761 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a3392e912 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=217 identity=10761 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a3392e912 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=217 identity=10761 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-8m4d7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 ecfb0ba8-16bb-4e7f-b72c-35fe723b44a7 default }" containerID=a6582e9a28014e10b03c98ee27682c7544b893982a4e9934e41218ab4ec6ab24 datapathConfiguration="&{false false false false false }" interface=lxc18981eb489d2 k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6582e9a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6582e9a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6582e9a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=47174 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a6582e9a28 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=47174 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6582e9a28 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=658 identity=47174 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6582e9a28 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=47174 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7dd5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.51 140846ed-a088-401a-ac4e-1e5337da711c default }" containerID=c751732b0f12d70c6ad0b74f3d7a739ef6df46e2790e2d626f1aa1ecd8e224fb datapathConfiguration="&{false false false false false }" interface=lxc02452aa36263 k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=53753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2417 identity=53753 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c751732b0f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2417 identity=53753 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=endpoint level=info msg="Successful endpoint creation" containerID=c751732b0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2417 identity=53753 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.35 00105efd-18c6-427e-82c2-54538adaf3b1 default }" containerID=4b5dfd26e96d779e34f4f607c0e896a1d99668aa8b90764d14ac57fc8513c2df datapathConfiguration="&{false false false false false }" interface=lxc913586866243 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b5dfd26e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b5dfd26e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b5dfd26e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=31498 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b5dfd26e9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2821 identity=31498 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b5dfd26e9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2821 identity=31498 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b5dfd26e9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2821 identity=31498 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c751732b0f endpointID=2417 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c751732b0f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2417 identity=53753 ipv4=10.0.0.51 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09265e1f-3b9d-4a39-9a9c-c4ef3cf97eae subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 694acfd1-a236-4537-b6f3-6aa74a2d6c85 default }" containerID=e078128c877b7bae277b5e3483dd5672664d8b1a83b8d72572c8433dfcd7114e datapathConfiguration="&{false false false false false }" interface=lxccda4393c6f55 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=1503 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1239 identity=1503 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e078128c87 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1239 identity=1503 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e078128c87 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1239 identity=1503 ipv4=10.0.0.138 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.36 9415b343-bf9b-4df8-b265-25a54b4256dd default }" containerID=13a187bfc9836435a1aa0640bfbf7f59dc592826b939205749cdcc8ecbd1b01a datapathConfiguration="&{false false false false false }" interface=lxc9c95a00412ff k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13a187bfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13a187bfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13a187bfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=868 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13a187bfc9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=295 identity=868 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13a187bfc9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=295 identity=868 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=13a187bfc9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=295 identity=868 ipv4=10.0.0.36 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-2f4qr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.147 c67cbe09-4195-47eb-b388-0798e5a21492 default }" containerID=95181adfda05d1fe84baf0a4599d728cb3fff4bb80d8fbcf3aad1807df808bb6 datapathConfiguration="&{false false false false false }" interface=lxc75a2025b6d13 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=95181adfda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=95181adfda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=95181adfda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=62341 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=95181adfda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2693 identity=62341 ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=95181adfda datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2693 identity=62341 ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=95181adfda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2693 identity=62341 ipv4=10.0.0.147 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.127 abc0f1c6-2692-41e1-9e4a-f9996212d99c default }" containerID=1dab12c1c40cd1799073c2022ebe992de64729e9c922bf6c7993bb543e605388 datapathConfiguration="&{false false false false false }" interface=lxc742f018a3357 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=991 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=224 identity=991 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dab12c1c4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=224 identity=991 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dab12c1c4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=224 identity=991 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-5lwcb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.048021215830273356 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.116 2f22cf96-eb38-470b-904e-2fffed10c43c default }" containerID=a6e8e41a765acd0832355ced74679d32a7b2dba72c5c641851b2b1e0b20ee6b0 datapathConfiguration="&{false false false false false }" interface=lxcf8b847260f29 k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=555 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=555 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6e8e41a76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=81 identity=555 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6e8e41a76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=81 identity=555 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a6e8e41a76 endpointID=81 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-bsrbb subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=d4c6d68f-c0ff-4b92-aeda-e570e2d3e64d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a6e8e41a76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=81 identity=555 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-bsrbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 3b2eaedc-134c-40dd-804b-35c17d95a590 default }" containerID=d24a00b4328f889a807d2879a5738c2d568bc1269ed37ce4f6eca039662be1a7 datapathConfiguration="&{false false false false false }" interface=lxc464f0f012935 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d24a00b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d24a00b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d24a00b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=56583 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d24a00b432 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=683 identity=56583 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 c042d7a2-2973-4317-876d-ff16ce272aec default }" containerID=f8d294d8b22eb98c9d4e6887ec9fb59b8a2589977f700873b0109b739e0d60e2 datapathConfiguration="&{false false false false false }" interface=lxce2ba32c390e6 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f8d294d8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f8d294d8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f8d294d8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=26166 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f8d294d8b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2462 identity=26166 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 26e65e37-2fb9-4bd7-88e3-4385484fd6ea default }" containerID=31e811e2a5ec01effaff5d4903ea2540b55a38f0d2d9c5003b90e63e7be50b82 datapathConfiguration="&{false false false false false }" interface=lxc8eddeada3ec4 k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31e811e2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31e811e2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31e811e2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=9543 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31e811e2a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1172 identity=9543 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d24a00b432 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=683 identity=56583 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=d24a00b432 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=683 identity=56583 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-vdkxl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=31e811e2a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1172 identity=9543 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw subsys=endpoint level=info msg="Successful endpoint creation" containerID=31e811e2a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1172 identity=9543 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-8bb6789b-qd4bw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f8d294d8b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2462 identity=26166 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g subsys=endpoint level=info msg="Successful endpoint creation" containerID=f8d294d8b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2462 identity=26166 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-lf48g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 4858c924-40ae-4072-85d2-ec3e585d9d23 default }" containerID=6e7c38b0c536f9cfa777f45554e7be91e239de574a50e6ad4a5c263fa800ebe9 datapathConfiguration="&{false false false false false }" interface=lxc1f1310409b61 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7c38b0c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7c38b0c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7c38b0c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=36431 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7c38b0c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=36431 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e7c38b0c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=599 identity=36431 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7c38b0c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=36431 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 fa644fb1-045b-4440-ad20-6a6f3c8af06d default }" containerID=23caa560000e499bf7ac594a1236d158aba451f728aa7f2ad4a3bdd890be427e datapathConfiguration="&{false false false false false }" interface=lxc07497c763eb1 k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23caa56000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23caa56000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23caa56000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=53753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23caa56000 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=53753 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=23caa56000 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2161 identity=53753 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=endpoint level=info msg="Successful endpoint creation" containerID=23caa56000 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2161 identity=53753 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 410d3e86-7688-4e76-bff0-ec767ec69f8c default }" containerID=3df6446c5b31e3f0d720c2454f90fbae1d436e2cf7227d2a5c0a113608cb470f datapathConfiguration="&{false false false false false }" interface=lxc98a34a7197f2 k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3df6446c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3df6446c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3df6446c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=53753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3df6446c5b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3035 identity=53753 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3df6446c5b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3035 identity=53753 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3df6446c5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3035 identity=53753 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6e7c38b0c5 endpointID=599 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-bp8z6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=c610755f-f66b-44b2-b574-0f3fee4c385d k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=6e7c38b0c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=599 identity=36431 ipv4=10.0.0.11 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-bp8z6 subsys=endpoint level=info msg="Delete endpoint request" containerID=23caa56000 endpointID=2161 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=23caa56000 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2161 identity=53753 ipv4=10.0.0.31 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-06f97861-b974-4452-9137-ac08db033389 subsys=endpoint level=info msg="Delete endpoint request" containerID=3df6446c5b endpointID=3035 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3df6446c5b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3035 identity=53753 ipv4=10.0.0.164 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0b890f49-d74e-4a86-bdb6-4e512d6e83a9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.99 c2c1fd5a-57e5-49cc-85d5-5adfa20e2271 default }" containerID=2b1c935066607e14de3368dcc24031d46c2c8ff0b533813a59c36509ce3a88ed datapathConfiguration="&{false false false false false }" interface=lxcc4366046ee5e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=11597 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=11597 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b1c935066 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1159 identity=11597 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b1c935066 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1159 identity=11597 ipv4=10.0.0.99 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.83 72ce852e-0351-4037-9c6e-55fa33714e59 default }" containerID=f5bb0b74288a3fb20c1790a05d52c7c00049226427cad39c9dfc99b82becf17e datapathConfiguration="&{false false false false false }" interface=lxc6bc11763c7d1 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5bb0b7428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5bb0b7428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5bb0b7428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identity=2222 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f5bb0b7428 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2362 identity=2222 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5bb0b7428 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2362 identity=2222 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5bb0b7428 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2362 identity=2222 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.121 22b1c1ff-8f95-4a6d-90db-96d0902ee37d default }" containerID=6040806c7633862e66ff4497a1ff7ad085faa515b0d41dacc96a9ae0cd68acbb datapathConfiguration="&{false false false false false }" interface=lxc34717fd050a8 k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6040806c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6040806c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6040806c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=53753 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6040806c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1329 identity=53753 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6040806c76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1329 identity=53753 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=endpoint level=info msg="Successful endpoint creation" containerID=6040806c76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1329 identity=53753 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=daemon level=info msg="Delete endpoint request" containerID=6040806c76 endpointID=1329 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6040806c76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1329 identity=53753 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7d5d9146-22a2-4b97-a719-760238ac2c5e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 3f6db5ac-971d-4aee-a128-599a54719c15 default }" containerID=2018deefe3cf1d38ad9a16ab7be927766bf1de732986b8e9c8594c4633e975bf datapathConfiguration="&{false false false false false }" interface=lxc3fbaa5c712c2 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2018deefe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3203 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2018deefe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3203 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2018deefe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3203 identity=3433 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2018deefe3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3203 identity=3433 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2018deefe3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3203 identity=3433 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2018deefe3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3203 identity=3433 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.232 b965167e-7ca3-422f-a655-9af4392ec1d7 default }" containerID=bb2a9c96a5da72d97231c8802e693e3d5dc1a98a6a7387d1feffd685fd7e2d66 datapathConfiguration="&{false false false false false }" interface=lxc845fad1f54af k8sPodName=openstack/keystone-api-566c9777dd-qv9bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb2a9c96a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb2a9c96a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bb2a9c96a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=6301 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=bb2a9c96a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3408 identity=6301 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 7265005e-85ef-4d8e-9906-63925d7f7fa7 default }" containerID=d38b403614aa541365b4c7e98f4bc8d531e2c974f90a9b27645d50f7c720e307 datapathConfiguration="&{false false false false false }" interface=lxc4f55cbc42b39 k8sPodName=openstack/keystone-credential-setup-gf8z7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d38b403614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d38b403614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d38b403614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=34400 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d38b403614 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3507 identity=34400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb2a9c96a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3408 identity=6301 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb2a9c96a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3408 identity=6301 ipv4=10.0.0.232 ipv6= k8sPodName=openstack/keystone-api-566c9777dd-qv9bb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d38b403614 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3507 identity=34400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d38b403614 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3507 identity=34400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d38b403614 endpointID=3507 k8sNamespace=openstack k8sPodName=keystone-credential-setup-gf8z7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=a58d91c6-9181-4ae3-b04e-14c6ab9b22fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d38b403614 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3507 identity=34400 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-credential-setup-gf8z7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 2c078f2f-bba6-434a-9897-9ad86a51be3f default }" containerID=4e6855c0de33cf83fbd57b85f6aa688c8a3a68da7128c7b36db66da8a1ff43e2 datapathConfiguration="&{false false false false false }" interface=lxc86a3b82989a6 k8sPodName=openstack/keystone-db-init-5vdvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e6855c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e6855c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e6855c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=39247 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4e6855c0de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=728 identity=39247 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e6855c0de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=728 identity=39247 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e6855c0de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=728 identity=39247 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=daemon level=info msg="Delete endpoint request" containerID=4e6855c0de endpointID=728 k8sNamespace=openstack k8sPodName=keystone-db-init-5vdvm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=0c49a3be-178d-4cb0-8852-8e241329154c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4e6855c0de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=728 identity=39247 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/keystone-db-init-5vdvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 7601f5b9-a1ba-4fc2-98e3-6f1090a91b72 default }" containerID=c541fbb323360c7ce23cf9038dc2d969a5990b15f1c0383eb9f771381fa46430 datapathConfiguration="&{false false false false false }" interface=lxcf59a191e1f92 k8sPodName=openstack/keystone-fernet-setup-mhkxh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=46038 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1456 identity=46038 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c541fbb323 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1456 identity=46038 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c541fbb323 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1456 identity=46038 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c541fbb323 endpointID=1456 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-mhkxh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=20c89704-a9cb-424c-8ddf-d2f76bc318da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c541fbb323 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1456 identity=46038 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/keystone-fernet-setup-mhkxh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 36ebb315-06ac-4940-8941-6f46316ee4eb default }" containerID=fdda672a64787ec1c9dea62b75b3b27adfcf1db2fb4240df01901aa0a187a217 datapathConfiguration="&{false false false false false }" interface=lxc81aff990a4eb k8sPodName=openstack/keystone-db-sync-rjzth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fdda672a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fdda672a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fdda672a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=21260 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fdda672a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=50 identity=21260 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fdda672a64 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=50 identity=21260 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=endpoint level=info msg="Successful endpoint creation" containerID=fdda672a64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=50 identity=21260 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fdda672a64 endpointID=50 k8sNamespace=openstack k8sPodName=keystone-db-sync-rjzth subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=4c4850bf-0e1f-46ac-8a8b-00ffb5e665f9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fdda672a64 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=50 identity=21260 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/keystone-db-sync-rjzth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 c67cc071-df53-4be8-8404-550bb63fb292 default }" containerID=73b444e7c571fa770a5223a981b17712890d02ac23d0ebd52acaeab6214ffe92 datapathConfiguration="&{false false false false false }" interface=lxcb74d1b0c6f78 k8sPodName=openstack/keystone-rabbit-init-cdrbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73b444e7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3332 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73b444e7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3332 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73b444e7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3332 identity=480 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73b444e7c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3332 identity=480 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=73b444e7c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3332 identity=480 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=73b444e7c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3332 identity=480 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73b444e7c5 endpointID=3332 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-cdrbf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=61a6338b-7ffc-4adb-b7b6-8d60c325d47a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=73b444e7c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3332 identity=480 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-rabbit-init-cdrbf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.128 627eb64a-b126-49eb-849d-94342c896b6f default }" containerID=579a8867d1846c28e55734cb6795c128cd7435d0c64eccadf0d5a86b0eabc390 datapathConfiguration="&{false false false false false }" interface=lxcae2f1389914f k8sPodName=openstack/keystone-domain-manage-xsjbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=579a8867d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=579a8867d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=579a8867d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=33373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=579a8867d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1901 identity=33373 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=579a8867d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1901 identity=33373 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=579a8867d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=33373 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=579a8867d1 endpointID=1901 k8sNamespace=openstack k8sPodName=keystone-domain-manage-xsjbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=873c7fbc-b89c-49a8-be09-f43edf59b8a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=579a8867d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1901 identity=33373 ipv4=10.0.0.128 ipv6= k8sPodName=openstack/keystone-domain-manage-xsjbb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 e4037086-0582-4bcf-bf37-0c25009e39df default }" containerID=0379eb61b15997aaf898f3be6008a57c1b91737efc9cf1e33808415104473744 datapathConfiguration="&{false false false false false }" interface=lxce9e97e312306 k8sPodName=openstack/keystone-bootstrap-mkh8l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=34966 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3014 identity=34966 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0379eb61b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3014 identity=34966 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=endpoint level=info msg="Successful endpoint creation" containerID=0379eb61b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3014 identity=34966 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0379eb61b1 endpointID=3014 k8sNamespace=openstack k8sPodName=keystone-bootstrap-mkh8l subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=f5a89ad4-d9b6-4b4e-9cde-6acd4b0dc58b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0379eb61b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3014 identity=34966 ipv4=10.0.0.64 ipv6= k8sPodName=openstack/keystone-bootstrap-mkh8l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.81 4a0a9bba-ea0b-4391-b7c8-aa45e452b110 default }" containerID=45bd1bfd724bca81b7131312dd39f838ec4438207ea5f8f0e03db85ebb26390c datapathConfiguration="&{false false false false false }" interface=lxc2f1fb0173131 k8sPodName=openstack/horizon-789fc88b76-2m2x4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=1222 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=577 identity=1222 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 691557f9-d0a6-4c2d-a185-f338771c843f default }" containerID=a0b91968b9ecefbf0511aea8214bd72d2344b1a7f0e310ff9cfc517d892b68f8 datapathConfiguration="&{false false false false false }" interface=lxcc8b1f8f3d50a k8sPodName=openstack/horizon-789fc88b76-x7n66 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.32 dbef3547-13b5-41fa-bf2b-43495ee7fb25 default }" containerID=09a4868609d530617bb4d789cd14cd25d59f42fabb1f9ccdddc5ec2f445ddeac datapathConfiguration="&{false false false false false }" interface=lxcf07956b50a38 k8sPodName=openstack/horizon-789fc88b76-95w4q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0b91968b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 subsys=endpoint level=info msg="New endpoint" containerID=09a4868609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0b91968b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a0b91968b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=1222 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0b91968b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2516 identity=1222 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09a4868609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q subsys=endpoint level=info msg="Identity of endpoint changed" containerID=09a4868609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=1222 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09a4868609 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=788 identity=1222 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 c5123036-aebe-4b70-bedb-391e275b38c7 default }" containerID=103b871676b031f289d30d78f531d718c40c4378cf42a4ad949ac234ad31a0e1 datapathConfiguration="&{false false false false false }" interface=lxc25e3ef276814 k8sPodName=openstack/horizon-db-init-s7fjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=103b871676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=103b871676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=103b871676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=61100 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=103b871676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=61100 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45bd1bfd72 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=577 identity=1222 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45bd1bfd72 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=577 identity=1222 ipv4=10.0.0.81 ipv6= k8sPodName=openstack/horizon-789fc88b76-2m2x4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=09a4868609 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=788 identity=1222 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q subsys=endpoint level=info msg="Successful endpoint creation" containerID=09a4868609 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=788 identity=1222 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/horizon-789fc88b76-95w4q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a0b91968b9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2516 identity=1222 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0b91968b9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2516 identity=1222 ipv4=10.0.0.131 ipv6= k8sPodName=openstack/horizon-789fc88b76-x7n66 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=103b871676 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=974 identity=61100 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=103b871676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=974 identity=61100 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=103b871676 endpointID=974 k8sNamespace=openstack k8sPodName=horizon-db-init-s7fjh subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=79252eb1-7c2f-4af4-9d1f-d493ffd0fee0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=103b871676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=974 identity=61100 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/horizon-db-init-s7fjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 f1d4cefd-4e4c-4d59-be2f-a1713de31d86 default }" containerID=1193fea4b04437e16c3a106e3bf1325433a636252c6951c030c0e613cb863804 datapathConfiguration="&{false false false false false }" interface=lxce652cfe8b80d k8sPodName=openstack/horizon-db-sync-xrfw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=7061 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=7061 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1193fea4b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=187 identity=7061 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1193fea4b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=187 identity=7061 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1193fea4b0 endpointID=187 k8sNamespace=openstack k8sPodName=horizon-db-sync-xrfw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=2c1ebbf3-2762-4673-b611-8a12d039e495 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=1193fea4b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=187 identity=7061 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/horizon-db-sync-xrfw9 subsys=endpoint