level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="954.445µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="49.342µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="997.135µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.471µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.229201ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="13.161µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.59µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="59.801µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="65.181µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="99.992µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="412.18µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.2047ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=7.004789ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="59.361µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="60.302µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="452.802µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="151.414µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="88.412µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=48.819828ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="86.982µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.771µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="1.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.242.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.68576ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.28526ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="18.111µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.377607ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="53.752µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.94µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.71µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.131µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="16.24µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="52.351µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration=1.095608ms function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="6.97µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.08µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="228.215µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="773.631µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.164129ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.82µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="25.441µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.242 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.242 ipAddr.ipv6="" k8sNodeIP=199.204.45.242 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.242" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.224" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.242" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.242} {CiliumInternalIP 10.0.0.224}] 10.0.0.0/24 [] [] 10.0.0.28 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37359" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.679580168s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="34.371µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="14.1µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="71.762µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="18.98µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=66 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.665209792s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=325.255431ms file-path=/var/run/cilium/state/templates/55a219468c7229ff7b9060a113cdebc4d6710d5a655784afe64d6b767a6cde27/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=66 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 df63f349-b712-4285-8b91-a030bc91c77d default }" containerID=840f141676887e55d811c7c49b2b0ac53eb9ba2c0c898c0b17cbd5fef2e9d0ca datapathConfiguration="&{false false false false false }" interface=lxcab4cc9175a62 k8sPodName=kube-system/coredns-7c96b6546b-wsvdn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=840f141676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=840f141676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.57 ea34bea8-dd9a-4626-9aa2-6c2a0076afbe default }" containerID=9b1dc1789fed32557de57abac167ceae41b69bb8d31f6c44db117065dc8c7145 datapathConfiguration="&{false false false false false }" interface=lxc54a45bcbba60 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=840f141676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=9539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=840f141676 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2147 identity=9539 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identity=55455 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3850 identity=55455 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identityLabels="reserved:health" ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identity=4 identityLabels="reserved:health" ipv4=10.0.0.28 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.133846544s file-path=/var/run/cilium/state/templates/01f3b3d1f9b4e85f82f684c7cd5df410bccc9d2fcafb1b6dab8cf67bab8d8360/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=840f141676 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2147 identity=9539 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=endpoint level=info msg="Successful endpoint creation" containerID=840f141676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2147 identity=9539 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2802 identity=4 ipv4=10.0.0.28 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9b1dc1789f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3850 identity=55455 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9b1dc1789f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3850 identity=55455 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9b1dc1789f endpointID=3850 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-pwvzl subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=ee712f94-be85-4402-a0aa-4bf3ec89888c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=9b1dc1789f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3850 identity=55455 ipv4=10.0.0.57 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-pwvzl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 5d021085-b68e-47f9-9c7b-5838952b33b9 default }" containerID=173838323d6a109121c606963573d4477ca6e9ca4f0c7dd2ba75f8119517c62f datapathConfiguration="&{false false false false false }" interface=lxc173ce1521e93 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=173838323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=173838323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=173838323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=30008 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=173838323d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1631 identity=30008 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=173838323d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1631 identity=30008 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj subsys=endpoint level=info msg="Successful endpoint creation" containerID=173838323d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1631 identity=30008 ipv4=10.0.0.252 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v84vj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00066 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00066 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00066 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00066:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=66 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 2399157f-da0b-4414-9991-c01620f16822 default }" containerID=201b61c82b45517472ea1c0b6265b62e8356f9c74db687db56cb9b95687e999a datapathConfiguration="&{false false false false false }" interface=lxc8ceb62892ae5 k8sPodName=kube-system/coredns-67659f764b-w7xqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=201b61c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=201b61c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf subsys=endpoint level=info msg="Identity of endpoint changed" containerID=201b61c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=9539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=201b61c82b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1882 identity=9539 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 f05a345c-092b-4fc8-8560-3bf812411627 default }" containerID=9a905c54619eb024a728b60619341516b9073e0d8470f74e50c6570b3ff4efa1 datapathConfiguration="&{false false false false false }" interface=lxc8791a00065e8 k8sPodName=kube-system/coredns-67659f764b-h7m6b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a905c5461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a905c5461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9a905c5461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=9539 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a905c5461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=977 identity=9539 ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9a905c5461 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=977 identity=9539 ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a905c5461 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=977 identity=9539 ipv4=10.0.0.127 ipv6= k8sPodName=kube-system/coredns-67659f764b-h7m6b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=201b61c82b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1882 identity=9539 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=201b61c82b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1882 identity=9539 ipv4=10.0.0.68 ipv6= k8sPodName=kube-system/coredns-67659f764b-w7xqf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.176 69b93c5e-2720-4783-becf-4c794d3f21e5 default }" containerID=f77fe247777b9178eb853e8fa89d57e9b83e115353d8d4b2472eae4132224c0e datapathConfiguration="&{false false false false false }" interface=lxc2b3cd6d27d2f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=1110 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2236 identity=1110 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f77fe24777 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2236 identity=1110 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f77fe24777 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2236 identity=1110 ipv4=10.0.0.176 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-px6wd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=840f141676 endpointID=2147 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-wsvdn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=840f141676 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2147 identity=9539 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-wsvdn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 8a3721f8-93ed-4000-96ca-cc4e8d578c1d default }" containerID=2e394c96646cbdbfeb5e683f3384fafa922345aaf1c4f03c90e719c0e86f6c94 datapathConfiguration="&{false false false false false }" interface=lxcbed13ffc4546 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e394c9664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 8ae30203-877b-47ca-a7eb-b843fe9fabda default }" containerID=3a51a8dcd4aa81f48ee7c136f0e6ea1ae9de141fe707c0a2948f4e8f2acf4cdd datapathConfiguration="&{false false false false false }" interface=lxca16e26d39b1e k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 a93cd591-2fa2-43a2-9bed-32a137cac8f8 default }" containerID=0f895c7bcee9800ac50d3166a9a7dd8408287bb93679e46c6585c7b680ee2304 datapathConfiguration="&{false false false false false }" interface=lxc612b1b80ebb9 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=2e394c9664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth subsys=endpoint level=info msg="New endpoint" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2e394c9664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=19021 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e394c9664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3098 identity=19021 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identity=1409 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=766 identity=1409 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=3597 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3268 identity=3597 ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f895c7bce datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3268 identity=3597 ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f895c7bce datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3268 identity=3597 ipv4=10.0.0.50 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-929s6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e394c9664 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3098 identity=19021 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e394c9664 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3098 identity=19021 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-sbcth subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3a51a8dcd4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=766 identity=1409 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a51a8dcd4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=766 identity=1409 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-t5kp5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 28b49309-dd11-45b8-9430-573ae28edbe7 default }" containerID=494fa6d1df204afe7e44961e9ffacc46d7bb428071a30d1d9172fc17fff07a92 datapathConfiguration="&{false false false false false }" interface=lxca370be207f6b k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=494fa6d1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=494fa6d1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=494fa6d1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=23967 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=494fa6d1df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1696 identity=23967 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=494fa6d1df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1696 identity=23967 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=endpoint level=info msg="Successful endpoint creation" containerID=494fa6d1df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1696 identity=23967 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=494fa6d1df endpointID=1696 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-j8k7z subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=2aa673d7-e49d-4732-b316-35dfe43ab6a8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=494fa6d1df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1696 identity=23967 ipv4=10.0.0.37 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-j8k7z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 d4bbec4e-fb0d-4226-aa4f-3a181ec7b472 default }" containerID=edd06ed5d44d5221413e9c66332e04993b7ad6926edbfdb44d797ead55760842 datapathConfiguration="&{false false false false false }" interface=lxcffc738406fdd k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edd06ed5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edd06ed5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edd06ed5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=3101 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=edd06ed5d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=47 identity=3101 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edd06ed5d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=47 identity=3101 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=endpoint level=info msg="Successful endpoint creation" containerID=edd06ed5d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=47 identity=3101 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=edd06ed5d4 endpointID=47 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-mc86g subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=e1af6a83-3262-468d-b8b2-4d3350bcf699 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=edd06ed5d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=47 identity=3101 ipv4=10.0.0.175 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mc86g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.86 c767b969-e798-43bc-9da9-e19c7c4e4136 default }" containerID=7e8d91c7e5bd2055ae7a7f8f72b3a944767d6848fc701886c8de8430bf1461d6 datapathConfiguration="&{false false false false false }" interface=lxc3282a7bea32c k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7e8d91c7e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7e8d91c7e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7e8d91c7e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=9723 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7e8d91c7e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1295 identity=9723 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7e8d91c7e5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1295 identity=9723 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7e8d91c7e5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1295 identity=9723 ipv4=10.0.0.86 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k7l25 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.133 7cee1dde-40fa-48fb-817e-af609f5b0938 default }" containerID=7d6d3ed36f4f931389e363b5ff41468ee012284ef9316ee163cd579f9e0792d5 datapathConfiguration="&{false false false false false }" interface=lxce19b7867b15c k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d6d3ed36f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d6d3ed36f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d6d3ed36f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=23768 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d6d3ed36f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3575 identity=23768 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d6d3ed36f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3575 identity=23768 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d6d3ed36f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3575 identity=23768 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d6d3ed36f endpointID=3575 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wtzjz subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=c1a1b1dc-5c27-470d-9400-b45e50dbcbc7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=7d6d3ed36f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3575 identity=23768 ipv4=10.0.0.133 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wtzjz subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a18c648c-e6a4-410a-b9fe-31a49088ca95] Description:}]" policyAddRequest=23c94e9c-f4fc-423b-ab47-96c405d6ddba subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=23c94e9c-f4fc-423b-ab47-96c405d6ddba policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=44c4c46a-6392-455c-9958-cfcffc17ee5e] Description:}]" policyAddRequest=d7f5ed05-17fa-4950-b4fb-36219dc86a71 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d7f5ed05-17fa-4950-b4fb-36219dc86a71 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.60 4008a3f6-dbd1-4966-bb1c-d8f7573586ed default }" containerID=7495b823004c8676f68774ded193e531fa1c77c91631dce2f2a3278fdeef19a0 datapathConfiguration="&{false false false false false }" interface=lxce17aef1d986a k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7495b82300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7495b82300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=7495b82300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=32571 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7495b82300 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3308 identity=32571 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7495b82300 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3308 identity=32571 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7495b82300 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3308 identity=32571 ipv4=10.0.0.60 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-5bffm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.21 e638375b-f090-44e2-997c-2333642f3a6c default }" containerID=8fa1b21c0b383dbe8851f9cc127e14b2a9e08555fa353e1583df15a53820619a datapathConfiguration="&{false false false false false }" interface=lxc335075852516 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fa1b21c0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fa1b21c0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fa1b21c0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=3724 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fa1b21c0b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=3724 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fa1b21c0b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=31 identity=3724 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fa1b21c0b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=31 identity=3724 ipv4=10.0.0.21 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dq84z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.154 5369f3f4-1fb5-40a7-b652-6c789d02f918 default }" containerID=eb8f4031b0e5c2e6d73b8ef7fd05b59ed70ec1566f691924ee4cba93029a40d5 datapathConfiguration="&{false false false false false }" interface=lxce14fe32e1128 k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eb8f4031b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eb8f4031b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eb8f4031b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=17937 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eb8f4031b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3916 identity=17937 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eb8f4031b0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3916 identity=17937 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj subsys=endpoint level=info msg="Successful endpoint creation" containerID=eb8f4031b0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3916 identity=17937 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-5j4qj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.145 dadf50b9-956c-4485-8873-febbfa2fc852 default }" containerID=9d6c0e81a20a21f2ccb0264a6cc29988284603935b55c5c8ebf6193edbfbbfc1 datapathConfiguration="&{false false false false false }" interface=lxc4be526d9fb1d k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d6c0e81a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d6c0e81a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d6c0e81a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=14916 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d6c0e81a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1505 identity=14916 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9d6c0e81a2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1505 identity=14916 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d6c0e81a2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1505 identity=14916 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.163 dfc6a9bf-9ede-464b-8635-384350ac4846 default }" containerID=271f8a628698420d89b4c6c8556d737e7daa489acf79818c6c913b43c29f7453 datapathConfiguration="&{false false false false false }" interface=lxcb29231a48a87 k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=271f8a6286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=271f8a6286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=271f8a6286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=271f8a6286 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=707 identity=26226 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=271f8a6286 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=707 identity=26226 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=endpoint level=info msg="Successful endpoint creation" containerID=271f8a6286 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=707 identity=26226 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=271f8a6286 endpointID=707 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=271f8a6286 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=707 identity=26226 ipv4=10.0.0.163 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-65642b6d-44e9-429c-9041-782b8ae80238 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 94a7415c-5ead-4277-b8dc-6b1306983946 default }" containerID=0ac2fbe30665134524244aed2e4ec927a4eebe5ec98109a73a9c68b0f39ce1dd datapathConfiguration="&{false false false false false }" interface=lxc320621e443ab k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ac2fbe306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ac2fbe306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ac2fbe306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=40462 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0ac2fbe306 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2409 identity=40462 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ac2fbe306 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2409 identity=40462 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ac2fbe306 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2409 identity=40462 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=4f38e528-2852-44a0-8bd4-7292b0d4d6b5] Description:}]" policyAddRequest=f238e84c-1786-4adc-89f9-60c19543a83d subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f238e84c-1786-4adc-89f9-60c19543a83d policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.177 58505b0f-9ab7-42b0-859c-a55ed386a684 default }" containerID=2f65495a5a5b9940fb68d8abacabc726fc84836567ef6259324fa80760e6f43a datapathConfiguration="&{false false false false false }" interface=lxcae423c3a9cde k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f65495a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f65495a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f65495a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f65495a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2f65495a5a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1708 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f65495a5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1708 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=daemon level=info msg="Delete endpoint request" containerID=2f65495a5a endpointID=1708 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2f65495a5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1708 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-f983bf77-ea38-498b-b300-c2ae7b73b5d8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 ad3f99f0-09e4-4f80-ad48-db3f0e1c61bb default }" containerID=b9cd23268255c0a156ec92bd44a659427ee3b7af8e2e012a0476f86e0392cc26 datapathConfiguration="&{false false false false false }" interface=lxc83e2489e8343 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9cd232682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9cd232682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b9cd232682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=5403 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9cd232682 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=21 identity=5403 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9cd232682 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=21 identity=5403 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9cd232682 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=21 identity=5403 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=046cdf18-c604-4c45-b23b-64a104b5a9f8] Description:}]" policyAddRequest=3b10ef8e-209f-4087-b7a2-15ef1340e6f3 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=3b10ef8e-209f-4087-b7a2-15ef1340e6f3 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.40 90d2f1b0-04ce-4dfd-87b5-ed41a928c8d6 default }" containerID=0a41ee2f3acb492003c35896f7bf676f8fe01be1ed4d35476ea4ce8278f39745 datapathConfiguration="&{false false false false false }" interface=lxcc0b9ebc51318 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a41ee2f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a41ee2f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a41ee2f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=19004 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a41ee2f3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=19004 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0a41ee2f3a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1136 identity=19004 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a41ee2f3a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1136 identity=19004 ipv4=10.0.0.40 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.00820065740527818 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.248 8ad16685-7f67-4ba4-8d6b-f40967cc669f default }" containerID=5958cd6b78998d786cb16ebef09b205d9feb4a31d472444e865375de6752938d datapathConfiguration="&{false false false false false }" interface=lxc56a44b3f71d1 k8sPodName=monitoring/node-feature-discovery-worker-jncbp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5958cd6b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5958cd6b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5958cd6b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=55338 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=5958cd6b78 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3883 identity=55338 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5958cd6b78 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3883 identity=55338 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp subsys=endpoint level=info msg="Successful endpoint creation" containerID=5958cd6b78 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3883 identity=55338 ipv4=10.0.0.248 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-jncbp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 31c63989-01bb-400d-8871-f8abc0e8f2d1 default }" containerID=0aa621c21c7f229949cb7835451126b891d9368c02faf967d0cb737f2cc4d324 datapathConfiguration="&{false false false false false }" interface=lxcf2846bd981c8 k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0aa621c21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0aa621c21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.201 53a1fd04-72ba-4de6-b8d9-7a04a2cd7cad default }" containerID=3409380177710f82d41bcd1217c084ad0c579322e14115d86176c822c353aba4 datapathConfiguration="&{false false false false false }" interface=lxce15e25507838 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3409380177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3409380177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0aa621c21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=923 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=0aa621c21c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3601 identity=923 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3409380177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=15767 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3409380177 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=635 identity=15767 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0aa621c21c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3601 identity=923 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=0aa621c21c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3601 identity=923 ipv4=10.0.0.242 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-xxhdj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3409380177 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=635 identity=15767 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb subsys=endpoint level=info msg="Successful endpoint creation" containerID=3409380177 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=635 identity=15767 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-cqmzb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.110 524df3e9-b6bb-4de7-9983-2c8f6f3166cd default }" containerID=51e84f48601d0dd4eff28cef90e93004c782cb2f01f5488c1d22cafb2c2cd492 datapathConfiguration="&{false false false false false }" interface=lxc7fc5578c5beb k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=51e84f4860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=51e84f4860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=51e84f4860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=35587 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=51e84f4860 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=441 identity=35587 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=51e84f4860 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=441 identity=35587 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=51e84f4860 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=441 identity=35587 ipv4=10.0.0.110 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-86gxl subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00066 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00066 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00066 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00066:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=66 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.67 79c988d5-14a5-4905-9c16-780269fc9fda default }" containerID=a5099cb55e05781b288ead8e2f8f9bd3e28782cfe5941d814f509e1400fe0fc8 datapathConfiguration="&{false false false false false }" interface=lxc4772912ada1f k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=22239 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=367 identity=22239 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5099cb55e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=367 identity=22239 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5099cb55e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=22239 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a5099cb55e endpointID=367 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-phvlm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=8aad0793-51eb-457b-bd80-65b251d6c3fe k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=a5099cb55e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=367 identity=22239 ipv4=10.0.0.67 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-phvlm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 8f032ee6-1ecc-451f-841b-53669d4e5b31 default }" containerID=a2d15cf9c35a2f1e84e28bdacf56f9e2e2366ab7b4ca1fdb7d9bd7242ac59834 datapathConfiguration="&{false false false false false }" interface=lxc50ab737bc091 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2d15cf9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2d15cf9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2d15cf9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=45174 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2d15cf9c3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=69 identity=45174 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 168625ff-b9ad-42be-ae5d-dea37e3ba15f default }" containerID=741cffc07270c3d462ac4a72eb808672d9e8e4410214b15bc2016d018d4ad6cc datapathConfiguration="&{false false false false false }" interface=lxc6ad2db590a4c k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=741cffc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=741cffc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=741cffc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=3548 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=741cffc072 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3645 identity=3548 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a2d15cf9c3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=69 identity=45174 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2d15cf9c3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=69 identity=45174 ipv4=10.0.0.251 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-mdjn9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.131 f20911db-d811-4270-b715-25e3025f72c8 default }" containerID=2e2302c28945e4a62a300b27a1d40962fd66fab8190d5b38f14ae99cd2b9575d datapathConfiguration="&{false false false false false }" interface=lxc627ac15507a3 k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2e2302c289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2e2302c289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2e2302c289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identity=11827 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2e2302c289 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3440 identity=11827 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=741cffc072 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3645 identity=3548 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm subsys=endpoint level=info msg="Successful endpoint creation" containerID=741cffc072 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3645 identity=3548 ipv4=10.0.0.191 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-qsqcm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2e2302c289 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3440 identity=11827 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf subsys=endpoint level=info msg="Successful endpoint creation" containerID=2e2302c289 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3440 identity=11827 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6d98bf94c6-7l8hf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 7d2ac068-e840-4e5f-bd29-e314e172dc0b default }" containerID=fa0e4e4ece6c23f2825f1717bbf100b67cf8d7da77cb9b036354b5c1a1ddce2f datapathConfiguration="&{false false false false false }" interface=lxc24cc7fe9d907 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa0e4e4ece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa0e4e4ece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa0e4e4ece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=23850 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa0e4e4ece datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=437 identity=23850 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa0e4e4ece datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=437 identity=23850 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa0e4e4ece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=437 identity=23850 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fa0e4e4ece endpointID=437 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-qw8jj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=6c793631-8853-431d-bfa3-72baf6fdd8cb k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fa0e4e4ece datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=437 identity=23850 ipv4=10.0.0.39 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-qw8jj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 9f040d41-a18f-4dc5-99da-7cc0a4a90bd4 default }" containerID=1d1658b71b601cf7d4f6803a101ffd383b9eaab225178e77f7fa8c555fffc3fc datapathConfiguration="&{false false false false false }" interface=lxc94b1da2ba58d k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1d1658b71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1d1658b71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1d1658b71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1d1658b71b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=564 identity=26226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1d1658b71b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=564 identity=26226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1d1658b71b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=26226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.23 05dafadd-70e5-42fe-8c9f-e0b8b313a3c3 default }" containerID=b1f42f622e04a4c28a7e2d690410e357417e28c0fa9037439ae9c77c511ff003 datapathConfiguration="&{false false false false false }" interface=lxcc4abc31a65b9 k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1f42f622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1f42f622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b1f42f622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1f42f622e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=26226 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1f42f622e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=436 identity=26226 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1f42f622e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=26226 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=daemon level=info msg="Delete endpoint request" containerID=1d1658b71b endpointID=564 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=b1f42f622e endpointID=436 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1d1658b71b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=564 identity=26226 ipv4=10.0.0.87 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-24e48121-5a82-44d3-8e9d-2285230eeab4 subsys=endpoint level=info msg="Removed endpoint" containerID=b1f42f622e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=26226 ipv4=10.0.0.23 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2a8be3c6-3b45-4fa7-afff-f8ef6e950862 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 dc892783-8dbf-45a6-99d4-7c4cbd53f765 default }" containerID=15a7becc747435b4edc9f3fcae594df635ca04e6ca20af978c0c729a58fd1ec1 datapathConfiguration="&{false false false false false }" interface=lxcaeb04714f5bb k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15a7becc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15a7becc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15a7becc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=21655 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15a7becc74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=307 identity=21655 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.7 40acc15f-9e4f-4a1d-9edb-a5bc49a7d000 default }" containerID=fc86d7dae32d64b803522e7bb934b3119e799703897c5c52b2f2bf0191a35379 datapathConfiguration="&{false false false false false }" interface=lxc38b9ada1ed26 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc86d7dae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc86d7dae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc86d7dae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=10321 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc86d7dae3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3632 identity=10321 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15a7becc74 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=307 identity=21655 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15a7becc74 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=307 identity=21655 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fc86d7dae3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3632 identity=10321 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc86d7dae3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3632 identity=10321 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 2df517e0-2502-4325-8431-d09316a4a803 default }" containerID=7766610a4192971e1e9abcfaadfbd60655afc60664cde1632f3df5ac85e59a60 datapathConfiguration="&{false false false false false }" interface=lxccea063135675 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7766610a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7766610a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7766610a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=25711 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7766610a41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=25711 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.159 d0857aa9-72bb-4932-bf32-e0f1dc3a9358 default }" containerID=0be8df8daf1fff48beefda89a2b03b28b548cb155face2f435a7c8248b4de3fe datapathConfiguration="&{false false false false false }" interface=lxc7bd5c32a998c k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.175 9a7cf0f3-9e84-4c9f-8ea7-3a0582794355 default }" containerID=cbd2411fd3e8d58d939130b3ed438c55a8fd1cede267b903ffe9873b61e09f16 datapathConfiguration="&{false false false false false }" interface=lxc0c0f75f95ef2 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0be8df8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l subsys=endpoint level=info msg="New endpoint" containerID=cbd2411fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0be8df8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cbd2411fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0be8df8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=54612 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0be8df8daf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=54612 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbd2411fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=22903 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbd2411fd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=866 identity=22903 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7766610a41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=25711 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7766610a41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=25711 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cbd2411fd3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=866 identity=22903 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbd2411fd3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=866 identity=22903 ipv4=10.0.0.175 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0be8df8daf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=54612 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=0be8df8daf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=54612 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-hcr7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 95dcbb9a-1c2c-451d-aee3-d2af44bae893 default }" containerID=7cb9f88baa26a2aa1c6969a6e4ad8d128c069c59feace2f19e3fd4ed946f5b9b datapathConfiguration="&{false false false false false }" interface=lxc962642ef3120 k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7cb9f88baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7cb9f88baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7cb9f88baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7cb9f88baa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7cb9f88baa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=234 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7cb9f88baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.93 afb993a1-1484-418a-88e0-02e52ed40da0 default }" containerID=c261c5d8071cbe4c5c9f73ee66a8a36f415a7a07c90c032aed40f532960d5d63 datapathConfiguration="&{false false false false false }" interface=lxceffd7efd2f79 k8sPodName=monitoring/vector-dw4bx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identity=9739 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2532 identity=9739 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c261c5d807 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2532 identity=9739 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx subsys=endpoint level=info msg="Successful endpoint creation" containerID=c261c5d807 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2532 identity=9739 ipv4=10.0.0.93 ipv6= k8sPodName=monitoring/vector-dw4bx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7cb9f88baa endpointID=234 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7cb9f88baa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=234 identity=26226 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c64e54f8-ba09-4ae6-837a-85b09ace4d18 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 e890b10e-396a-4eaf-b9e0-8f09e22c1e2b default }" containerID=c0d6de409c233975a04d9d2fcf35fbac75a185610a222d8191a3e7eb304494f7 datapathConfiguration="&{false false false false false }" interface=lxcfe78fa1a1dbf k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=22144 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1666 identity=22144 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0d6de409c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1666 identity=22144 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0d6de409c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1666 identity=22144 ipv4=10.0.0.206 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-6mgxs subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 14f2952d-965b-4c08-815e-a4391728cc2c default }" containerID=1e5413d9b7a5cb93163c86f4722bfb34c7e7667f1928d7523c3966dabfece9b8 datapathConfiguration="&{false false false false false }" interface=lxc3068e3931b69 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5413d9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5413d9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e5413d9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=12657 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5413d9b7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2192 identity=12657 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e5413d9b7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2192 identity=12657 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5413d9b7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2192 identity=12657 ipv4=10.0.0.172 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.1 387bafc8-daee-49b7-8494-832b1cde3e53 default }" containerID=4b39894d57b8c6e7ab5c7aecd011a0b2a2a63ab8d4042e27c3c6a681090ee737 datapathConfiguration="&{false false false false false }" interface=lxc1cdca21ac4ea k8sPodName=openstack/memcached-memcached-6479589586-rhg9m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4b39894d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4b39894d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4b39894d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identity=49949 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4b39894d57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=401 identity=49949 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4b39894d57 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=401 identity=49949 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m subsys=endpoint level=info msg="Successful endpoint creation" containerID=4b39894d57 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=401 identity=49949 ipv4=10.0.0.1 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-rhg9m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.101 40ef2d71-4ef6-4be7-a740-964cb16459c4 default }" containerID=c37a38e7df58b37207b0c86d792f3bd90ebcb66618d93a534e9bc6df0439b403 datapathConfiguration="&{false false false false false }" interface=lxc06d809beebe9 k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c37a38e7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c37a38e7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c37a38e7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c37a38e7df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2581 identity=26226 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c37a38e7df datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2581 identity=26226 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=endpoint level=info msg="Successful endpoint creation" containerID=c37a38e7df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2581 identity=26226 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=daemon level=info msg="Delete endpoint request" containerID=c37a38e7df endpointID=2581 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c37a38e7df datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2581 identity=26226 ipv4=10.0.0.101 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-35971cad-ecd4-4f5b-9586-c8e65f83996e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 6d4c4e63-4c99-42fe-84c2-9a9a91e56e92 default }" containerID=e2ac9862c86905023005748219a560a41c7dba2eb76c40fed41933240abf6483 datapathConfiguration="&{false false false false false }" interface=lxca89c366f80fa k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e2ac9862c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e2ac9862c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=e2ac9862c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=4715 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e2ac9862c8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=268 identity=4715 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e2ac9862c8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=268 identity=4715 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e2ac9862c8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=268 identity=4715 ipv4=10.0.0.195 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.120 e7ed6235-06e2-47e9-83c9-a25f71c3a3d7 default }" containerID=5b424e3e69994f6d73e651a02628f601be35d8c4a4a0f518b61abe10704dc2a8 datapathConfiguration="&{false false false false false }" interface=lxcb28a79fb6ac5 k8sPodName=openstack/keystone-api-84c65b9696-4x47r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b424e3e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b424e3e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b424e3e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=45131 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b424e3e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1688 identity=45131 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.213 06643800-43fb-4344-b34d-4507bb044fdc default }" containerID=84da5131a900f8ca4266580e06ca73169fde7968ad9c72c6ac85a44866dd92ba datapathConfiguration="&{false false false false false }" interface=lxc3dc514633360 k8sPodName=openstack/keystone-credential-setup-cxwf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=84da5131a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=84da5131a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=84da5131a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=5562 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=84da5131a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=990 identity=5562 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b424e3e69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1688 identity=45131 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b424e3e69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1688 identity=45131 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/keystone-api-84c65b9696-4x47r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=84da5131a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=990 identity=5562 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=84da5131a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=990 identity=5562 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=84da5131a9 endpointID=990 k8sNamespace=openstack k8sPodName=keystone-credential-setup-cxwf9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=290b5dec-4a25-4773-a38a-85f9e47957da k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=84da5131a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=990 identity=5562 ipv4=10.0.0.213 ipv6= k8sPodName=openstack/keystone-credential-setup-cxwf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.11 4145f38b-d67d-4baa-af7e-3a719cd19d35 default }" containerID=dea5d543eeec697b8b7b8c76f536fc81473e33854157554c8a0fbf69d7b8e3c2 datapathConfiguration="&{false false false false false }" interface=lxc378fd9b3d186 k8sPodName=openstack/keystone-db-init-t7gp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dea5d543ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dea5d543ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dea5d543ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=27185 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dea5d543ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2210 identity=27185 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dea5d543ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2210 identity=27185 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dea5d543ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=27185 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=daemon level=info msg="Delete endpoint request" containerID=dea5d543ee endpointID=2210 k8sNamespace=openstack k8sPodName=keystone-db-init-t7gp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fbd8a740-c42e-41da-91b2-cc83051161c4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=dea5d543ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2210 identity=27185 ipv4=10.0.0.11 ipv6= k8sPodName=openstack/keystone-db-init-t7gp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 4ce93cf9-2544-4ce3-9c6e-d3f40de4d59b default }" containerID=67b561b981fb4374fa18e8f4e32f77c6ca0f6f835fccedfaa8a0d4bb0c2db577 datapathConfiguration="&{false false false false false }" interface=lxc5aadc4ee9f70 k8sPodName=openstack/keystone-fernet-setup-h7wqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=44083 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=44083 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=67b561b981 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=44083 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=67b561b981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=44083 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67b561b981 endpointID=331 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-h7wqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7ee69e78-4114-46cd-9b9f-b0f7c8d80f78 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=67b561b981 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=44083 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-fernet-setup-h7wqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 b20280b9-1555-42d4-bd78-1b1bd5f3e6d7 default }" containerID=856d11855544c92a34626f4b124091684377037e98bc7af50e346d4cb51a4a27 datapathConfiguration="&{false false false false false }" interface=lxc6a2bdce0cef0 k8sPodName=openstack/keystone-db-sync-jtp5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=856d118555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=856d118555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=856d118555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=18103 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=856d118555 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=70 identity=18103 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=856d118555 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=70 identity=18103 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=856d118555 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=18103 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=856d118555 endpointID=70 k8sNamespace=openstack k8sPodName=keystone-db-sync-jtp5z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=0ba77a8b-2250-4761-96b8-33e4050faffd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=856d118555 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=70 identity=18103 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-db-sync-jtp5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 9dc1845b-6494-49fe-adce-664111b0559c default }" containerID=a37d99d2004f81f77b948fe553cacfea96e588d21f15f4d8c18a31cc6e36b023 datapathConfiguration="&{false false false false false }" interface=lxc3fbcfd3c0be2 k8sPodName=openstack/keystone-rabbit-init-q7gmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=51544 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=496 identity=51544 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a37d99d200 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=496 identity=51544 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=a37d99d200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=496 identity=51544 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a37d99d200 endpointID=496 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-q7gmw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c4f52bf7-d354-4d82-b2cf-4798010b5ee7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a37d99d200 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=496 identity=51544 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-rabbit-init-q7gmw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 796d7b28-8ee7-43d2-97c1-27e7e364d550 default }" containerID=9d3e527d11bd42bd463a2b3baca08e478b68fb4ac0ddebdb91d8ab2abb3651c3 datapathConfiguration="&{false false false false false }" interface=lxc6092e051d983 k8sPodName=openstack/keystone-domain-manage-5vjnw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d3e527d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d3e527d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d3e527d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identity=4357 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9d3e527d11 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3415 identity=4357 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d3e527d11 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3415 identity=4357 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d3e527d11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3415 identity=4357 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9d3e527d11 endpointID=3415 k8sNamespace=openstack k8sPodName=keystone-domain-manage-5vjnw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=ef722c88-23fc-4748-b1a3-9aa3fbca5301 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9d3e527d11 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3415 identity=4357 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-5vjnw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 9f385a49-dd68-46cd-a254-fca129465828 default }" containerID=be86e5270e97db0401d49405bc77a4e985cc53f0dd91a79c16521d2f28161388 datapathConfiguration="&{false false false false false }" interface=lxcb09adf4dcdf0 k8sPodName=openstack/keystone-bootstrap-6zmfs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be86e5270e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be86e5270e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be86e5270e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=3778 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=be86e5270e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=3778 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.034158697093078304 newInterval=11m15s subsys=map-ct level=info msg="Rewrote endpoint BPF program" containerID=be86e5270e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=324 identity=3778 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=endpoint level=info msg="Successful endpoint creation" containerID=be86e5270e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=3778 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be86e5270e endpointID=324 k8sNamespace=openstack k8sPodName=keystone-bootstrap-6zmfs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=669071d5-ab98-4a64-95a5-1afb389aaf6a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=be86e5270e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=324 identity=3778 ipv4=10.0.0.63 ipv6= k8sPodName=openstack/keystone-bootstrap-6zmfs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.64 82145715-61f2-48a3-b75b-50b95ca1768c default }" containerID=1a094383bf87941f9b261b6feb0622ff3339029806d1737fab5070a39f44be0c datapathConfiguration="&{false false false false false }" interface=lxc702733a9b8c7 k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a094383bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a094383bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a094383bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a094383bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=615 identity=26226 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a094383bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=615 identity=26226 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a094383bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=615 identity=26226 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=daemon level=info msg="Delete endpoint request" containerID=1a094383bf endpointID=615 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1a094383bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=615 identity=26226 ipv4=10.0.0.64 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fa804c88-97f3-49fc-a8bb-0bfb834b6f28 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 078b6dde-6803-4c2b-a894-b83adf41ce51 default }" containerID=6298c9371325003f9a4c0c48d92ac1e5aeb4718f1018d4f79cd0fdd861af7cf5 datapathConfiguration="&{false false false false false }" interface=lxc3019a22120d8 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6298c93713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6298c93713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6298c93713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=11860 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6298c93713 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=11860 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6298c93713 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=11860 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6298c93713 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=11860 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.179 9b17718b-531e-4586-895a-711fc538527f default }" containerID=39310f0f69f25a5d5b8663a8df5233f15688c6d18eb4b8391676fc66c404d87a datapathConfiguration="&{false false false false false }" interface=lxcbf758a17100e k8sPodName=openstack/barbican-db-init-kf4lw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=39310f0f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39310f0f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39310f0f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=62862 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=39310f0f69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2199 identity=62862 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=39310f0f69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2199 identity=62862 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=endpoint level=info msg="Successful endpoint creation" containerID=39310f0f69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=62862 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.235 1ff448f2-b652-438c-a010-e5afb75540f7 default }" containerID=8f757d0550ea9a574b446611f6934ef04dcfb1450664604e410a6da51d6bc996 datapathConfiguration="&{false false false false false }" interface=lxc34f8763a4628 k8sPodName=openstack/barbican-api-7d587fff98-976jr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f757d0550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f757d0550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f757d0550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identity=7948 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f757d0550 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3459 identity=7948 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f757d0550 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3459 identity=7948 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f757d0550 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3459 identity=7948 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/barbican-api-7d587fff98-976jr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=39310f0f69 endpointID=2199 k8sNamespace=openstack k8sPodName=barbican-db-init-kf4lw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=32e1f981-f2be-4a0f-a6ab-a71889ca36a2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=39310f0f69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2199 identity=62862 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/barbican-db-init-kf4lw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 1ecc79ef-6f26-4191-837a-9c1a9c177f78 default }" containerID=48a5a62359b66df98da298358b5f5ef1af21bb3d9633a676b3773a87e84d5fdc datapathConfiguration="&{false false false false false }" interface=lxca54bd4ccc0f4 k8sPodName=openstack/barbican-db-sync-lg62d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48a5a62359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48a5a62359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=73643be8-4536-4168-996b-5c56a5934954,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=73643be8-4536-4168-996b-5c56a5934954,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=73643be8-4536-4168-996b-5c56a5934954;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=73643be8-4536-4168-996b-5c56a5934954;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=48a5a62359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=33690 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=73643be8-4536-4168-996b-5c56a5934954,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=73643be8-4536-4168-996b-5c56a5934954,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48a5a62359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=8 identity=33690 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48a5a62359 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=8 identity=33690 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=endpoint level=info msg="Successful endpoint creation" containerID=48a5a62359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=33690 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48a5a62359 endpointID=8 k8sNamespace=openstack k8sPodName=barbican-db-sync-lg62d subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=73643be8-4536-4168-996b-5c56a5934954 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=73643be8-4536-4168-996b-5c56a5934954 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=48a5a62359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=8 identity=33690 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/barbican-db-sync-lg62d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 468754a8-f4b8-4ad8-aa22-52212b394434 default }" containerID=7bb69fcf108ba70782cf4d991f5ab6352101e46f5666f2cc072b4019153f4af3 datapathConfiguration="&{false false false false false }" interface=lxcda39741d3629 k8sPodName=openstack/barbican-rabbit-init-t49vd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bb69fcf10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bb69fcf10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bb69fcf10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=22123 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7bb69fcf10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=134 identity=22123 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bb69fcf10 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=134 identity=22123 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bb69fcf10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=22123 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7bb69fcf10 endpointID=134 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-t49vd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=4a2a39e7-2025-47db-9b28-7b6e11a9026e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7bb69fcf10 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=134 identity=22123 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-t49vd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.240 e123a727-cbfd-49c7-a13b-74fc978ccb5d default }" containerID=69f24d7127d9be49dc43ff152a03fbbbc6ba29cb0c415e91692529639f93b11f datapathConfiguration="&{false false false false false }" interface=lxc82dfbeca2e46 k8sPodName=openstack/barbican-ks-service-ptt8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=61240 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=61240 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69f24d7127 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=61240 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=69f24d7127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=61240 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69f24d7127 endpointID=472 k8sNamespace=openstack k8sPodName=barbican-ks-service-ptt8c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=86fb02f2-96ef-4ca9-ab5f-dad65dee365a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=69f24d7127 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=61240 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/barbican-ks-service-ptt8c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 44321a3c-ca46-40e5-9c80-26486b3bb82b default }" containerID=2d09d5ca272dfdff1ec79afc2e1395e5d4dfc2eb47fdf7cef7f1f3af0b79a3a6 datapathConfiguration="&{false false false false false }" interface=lxc681bad38086d k8sPodName=openstack/barbican-ks-endpoints-6frfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d09d5ca27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d09d5ca27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d09d5ca27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=754 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2d09d5ca27 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=102 identity=754 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d09d5ca27 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=102 identity=754 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d09d5ca27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=754 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2d09d5ca27 endpointID=102 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6frfw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=e1e6e3b4-7248-4cc2-bbdf-43a7d602de89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=2d09d5ca27 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=102 identity=754 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6frfw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 69b70a45-018d-46fc-8c4e-56325d6cbf9b default }" containerID=4713f90320861ae2539b002cc6485f6ac9617977b283342df4568a7f6e8f3426 datapathConfiguration="&{false false false false false }" interface=lxce6530be7bb6e k8sPodName=openstack/barbican-ks-user-9jn9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4713f90320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4713f90320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4713f90320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=19025 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4713f90320 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=520 identity=19025 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4713f90320 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=520 identity=19025 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4713f90320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=520 identity=19025 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4713f90320 endpointID=520 k8sNamespace=openstack k8sPodName=barbican-ks-user-9jn9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=13f50145-bfa8-43e9-9824-4fe0ae72a094 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=4713f90320 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=520 identity=19025 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-user-9jn9t subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.247 ee247db4-e9e9-4efe-a905-a548cedbb3e9 default }" containerID=588dee4d87d1e1ab26627f6095e147a8bff4d00aa877bfbb34b36f40706b856a datapathConfiguration="&{false false false false false }" interface=lxcb51d066fd10e k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=588dee4d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=588dee4d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=588dee4d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=17962 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=588dee4d87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=943 identity=17962 ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=588dee4d87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=943 identity=17962 ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=588dee4d87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=943 identity=17962 ipv4=10.0.0.247 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-kzm97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.174 e5098613-f571-43e4-8c53-c64fbd68e60f default }" containerID=7f804590165d7f637bbabd8faa6c26faf960206c4eb98be31c8ea01a0d1f4ecb datapathConfiguration="&{false false false false false }" interface=lxcd3f0ebbb8e9c k8sPodName=openstack/rook-ceph-detect-version-sp8h4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f80459016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f80459016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f80459016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identity=7210 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f80459016 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identity=7210 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7f80459016 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2512 identity=7210 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f80459016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2512 identity=7210 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=daemon level=info msg="Delete endpoint request" containerID=7f80459016 endpointID=2512 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-sp8h4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=504b9e2c-1dc8-43f6-94ff-8882fb1a2eff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=7f80459016 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2512 identity=7210 ipv4=10.0.0.174 ipv6= k8sPodName=openstack/rook-ceph-detect-version-sp8h4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 616df49f-d190-40b7-9edb-9aafa5bca810 default }" containerID=db3c80665ff3454801fda9c8a149b491836c28331929903bdfff3332fb306b42 datapathConfiguration="&{false false false false false }" interface=lxc059d4553ad2d k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db3c80665f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db3c80665f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db3c80665f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=34740 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db3c80665f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=680 identity=34740 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db3c80665f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=680 identity=34740 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=endpoint level=info msg="Successful endpoint creation" containerID=db3c80665f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=34740 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.33 abf96713-5aca-44a3-9b0b-9acad4b918ab default }" containerID=cbf07dae7e546140c92a7a0616e13424bdb7fb9024079e8d03815f48ad813555 datapathConfiguration="&{false false false false false }" interface=lxca7dd7a5d4a64 k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cbf07dae7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cbf07dae7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbf07dae7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=26226 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbf07dae7e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=26226 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cbf07dae7e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=594 identity=26226 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbf07dae7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=26226 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cbf07dae7e endpointID=594 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=db3c80665f endpointID=680 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-7xb9z subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=aa7fd074-1755-4948-ae06-fd31797fec40 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=cbf07dae7e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=594 identity=26226 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-191b02c5-5d62-42df-a291-419dbc905fe5 subsys=endpoint level=info msg="Removed endpoint" containerID=db3c80665f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=680 identity=34740 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-7xb9z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.231 6cc4cd85-791b-4493-b322-ed9267be877a default }" containerID=ecf8516c21df33128906f02b95dfe0f037c6a1a1a2e145d1829c566551d09203 datapathConfiguration="&{false false false false false }" interface=lxc56a96f032715 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecf8516c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecf8516c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecf8516c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=5544 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ecf8516c21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1056 identity=5544 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecf8516c21 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1056 identity=5544 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecf8516c21 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1056 identity=5544 ipv4=10.0.0.231 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.160 30867a77-664d-4f61-8af0-ee9270d3804c default }" containerID=3d7993ab5e1d986abf01643577d135e9fbb70113663b0776101f629eb8821c55 datapathConfiguration="&{false false false false false }" interface=lxc39fd0d95ec80 k8sPodName=openstack/glance-db-init-m4p2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d7993ab5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d7993ab5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d7993ab5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=3809 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3d7993ab5e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=347 identity=3809 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3d7993ab5e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=347 identity=3809 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d7993ab5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=3809 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=daemon level=info msg="Delete endpoint request" containerID=3d7993ab5e endpointID=347 k8sNamespace=openstack k8sPodName=glance-db-init-m4p2l subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=c5fd9baf-62cb-48c5-b5d4-51273b93916d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3d7993ab5e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=347 identity=3809 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-db-init-m4p2l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 0f106568-5fb4-42c7-9553-fcd35f2b383e default }" containerID=2c417273688c3f483c6970cb9ec6f5d15ab5c88ce1c2edf2d7aa0f752467d10a datapathConfiguration="&{false false false false false }" interface=lxcc4defd47f7e3 k8sPodName=openstack/glance-db-sync-z6cml labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c41727368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c41727368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c41727368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=5997 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2c41727368 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2931 identity=5997 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2c41727368 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2931 identity=5997 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c41727368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=5997 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.210 eb4759c9-a7df-49c6-acb9-d482b5738f94 default }" containerID=36b01c684901ba9e063a791d861626a33dac1ce7a8475a70d5787f253efd17ac datapathConfiguration="&{false false false false false }" interface=lxc4f982914fae6 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=61364 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2906 identity=61364 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 f3d8a383-2508-42ba-9d41-306d9db7e77f default }" containerID=8265fadd3032bd4a37a77f928a86266dff79bea0e0bc5e6ed70f1606264b7060 datapathConfiguration="&{false false false false false }" interface=lxcd7c7094a8584 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8265fadd30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8265fadd30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8265fadd30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identity=54663 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8265fadd30 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3663 identity=54663 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36b01c6849 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2906 identity=61364 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl subsys=endpoint level=info msg="Successful endpoint creation" containerID=36b01c6849 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2906 identity=61364 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-vs4cl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8265fadd30 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3663 identity=54663 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8265fadd30 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3663 identity=54663 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-lg276 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2c41727368 endpointID=2931 k8sNamespace=openstack k8sPodName=glance-db-sync-z6cml subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=37a18767-f3fa-429e-9c35-11a3da163fe5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2c41727368 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2931 identity=5997 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/glance-db-sync-z6cml subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 c8a04a43-0048-40cf-808f-ac443926e2ce default }" containerID=a1e818ad3b9e707d1b3b523654c3bc7a73ec6d9970f937406056eed70f07fc69 datapathConfiguration="&{false false false false false }" interface=lxc52d22536b1a6 k8sPodName=openstack/glance-rabbit-init-kmjp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a1e818ad3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a1e818ad3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a1e818ad3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=6148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a1e818ad3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1133 identity=6148 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a1e818ad3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1133 identity=6148 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a1e818ad3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1133 identity=6148 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=daemon level=info msg="Delete endpoint request" containerID=a1e818ad3b endpointID=1133 k8sNamespace=openstack k8sPodName=glance-rabbit-init-kmjp7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2353a262-ddc8-4e51-b360-16b2230e6555 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a1e818ad3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1133 identity=6148 ipv4=10.0.0.243 ipv6= k8sPodName=openstack/glance-rabbit-init-kmjp7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 6f4d0599-792c-4935-9d62-0539b0e3c5a5 default }" containerID=f12b122f487d79b74b6a1c71815ca35264742fe1c8605533902e4af2009f95de datapathConfiguration="&{false false false false false }" interface=lxcb9475ea1b512 k8sPodName=openstack/glance-ks-service-7qmhd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=60860 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3636 identity=60860 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f12b122f48 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3636 identity=60860 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=endpoint level=info msg="Successful endpoint creation" containerID=f12b122f48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=60860 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f12b122f48 endpointID=3636 k8sNamespace=openstack k8sPodName=glance-ks-service-7qmhd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=5f99cda9-95f1-4070-ba7f-33ffff7d2dfc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f12b122f48 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3636 identity=60860 ipv4=10.0.0.203 ipv6= k8sPodName=openstack/glance-ks-service-7qmhd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 591b1ca8-1bb6-4707-9a42-20a41ae2936c default }" containerID=00b34a4b36a9d40be42a60a449772100e7682fc97c86a5616390cb828caedd79 datapathConfiguration="&{false false false false false }" interface=lxca38c01e8e326 k8sPodName=openstack/glance-ks-endpoints-rktzj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=00b34a4b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=00b34a4b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=00b34a4b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=4270 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=00b34a4b36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=462 identity=4270 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=00b34a4b36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=462 identity=4270 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=endpoint level=info msg="Successful endpoint creation" containerID=00b34a4b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=4270 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=00b34a4b36 endpointID=462 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-rktzj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7da1ccdb-6cc0-45d7-bc53-77618d0e605d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=00b34a4b36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=462 identity=4270 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/glance-ks-endpoints-rktzj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 20131846-76c9-4618-8166-2771c9b93d8b default }" containerID=b38b70a1d0001d802df924f823b35d7bd0c7fe9d8e9dc4f39ebfbe6218a203ed datapathConfiguration="&{false false false false false }" interface=lxcda3f005ec6c5 k8sPodName=openstack/glance-ks-user-pnstk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=1010 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=453 identity=1010 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b38b70a1d0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=453 identity=1010 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=endpoint level=info msg="Successful endpoint creation" containerID=b38b70a1d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=1010 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b38b70a1d0 endpointID=453 k8sNamespace=openstack k8sPodName=glance-ks-user-pnstk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=543a056c-8aa9-4281-89ca-9428025ee7ee k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b38b70a1d0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=453 identity=1010 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/glance-ks-user-pnstk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 11bdbc08-7ecf-4cbd-833a-1a2f7703cd46 default }" containerID=4e0a2774ed1fb83f6ef9f329be712b7cb7c6d6fab45c7edcf8da0c7817a48c5c datapathConfiguration="&{false false false false false }" interface=lxcbd4e1341bb75 k8sPodName=openstack/glance-metadefs-load-cr2ln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=56977 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1586 identity=56977 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e0a2774ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1586 identity=56977 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e0a2774ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=56977 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e0a2774ed endpointID=1586 k8sNamespace=openstack k8sPodName=glance-metadefs-load-cr2ln subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=84bca791-1d85-44b7-836d-cc4c27d2ccb7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4e0a2774ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1586 identity=56977 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/glance-metadefs-load-cr2ln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 c9c6e53a-44b9-42de-95c7-8874dd76ef8b default }" containerID=e7da3e0c9a4c5ba9f1a180e0512580cf3f38abc61b420fcad9a0ec3f94679e90 datapathConfiguration="&{false false false false false }" interface=lxc33a4e427df67 k8sPodName=openstack/glance-storage-init-n26rr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7da3e0c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7da3e0c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7da3e0c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=4019 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7da3e0c9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=4019 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7da3e0c9a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=4019 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7da3e0c9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=4019 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7da3e0c9a endpointID=336 k8sNamespace=openstack k8sPodName=glance-storage-init-n26rr subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=aa417d10-dc53-4cc5-9ced-1ddfb9de9e93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e7da3e0c9a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=4019 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/glance-storage-init-n26rr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 b2a1479e-28d1-4aac-ba49-57f4077474df default }" containerID=2f5bb98a20a946a7db84592aa77c70d96c7218e3c7852fc78ebc492b8c3ae95e datapathConfiguration="&{false false false false false }" interface=lxcdd6195dfff1d k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f5bb98a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f5bb98a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f5bb98a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=63962 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f5bb98a20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=115 identity=63962 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f5bb98a20 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=115 identity=63962 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f5bb98a20 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=115 identity=63962 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/glance-api-6b9c44886c-c5xf4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.227 fc9ff1cd-d728-48f6-a699-9f65167f48e6 default }" containerID=5b7243d4251a8635247bfc1f7c23e09cbf0c0ccd7a703d9f8e3a87926f2e0ce1 datapathConfiguration="&{false false false false false }" interface=lxc1c70ebc20cdf k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5b7243d425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5b7243d425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5b7243d425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=7510 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5b7243d425 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1188 identity=7510 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.17 f399c8f9-8aad-4a5c-b173-75e668c77537 default }" containerID=615ba5af3bedec082f22d2e498ef780b392fddc263172a1ba3a8587c82d37ff5 datapathConfiguration="&{false false false false false }" interface=lxcf08be9ffb5d1 k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=615ba5af3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=615ba5af3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=615ba5af3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=18616 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=615ba5af3b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1810 identity=18616 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 fad716b0-3898-4c9b-9357-7da2c47d13c7 default }" containerID=708a963b8bd31e5a6f2c3250470f6c7fadaca10e7faa9cef0ec0ffdd76a5dd50 datapathConfiguration="&{false false false false false }" interface=lxc634379cd5eb9 k8sPodName=openstack/staffeln-db-init-6prxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=708a963b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=708a963b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d927a7f7-f833-4923-805f-bef940a64235,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d927a7f7-f833-4923-805f-bef940a64235,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=d927a7f7-f833-4923-805f-bef940a64235;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=d927a7f7-f833-4923-805f-bef940a64235;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=708a963b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=21879 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=d927a7f7-f833-4923-805f-bef940a64235,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=d927a7f7-f833-4923-805f-bef940a64235,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=708a963b8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=242 identity=21879 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5b7243d425 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1188 identity=7510 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5b7243d425 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1188 identity=7510 ipv4=10.0.0.227 ipv6= k8sPodName=openstack/staffeln-api-78b5fd6484-dkwm8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=615ba5af3b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1810 identity=18616 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz subsys=endpoint level=info msg="Successful endpoint creation" containerID=615ba5af3b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1810 identity=18616 ipv4=10.0.0.17 ipv6= k8sPodName=openstack/staffeln-conductor-7cdfddd4c9-nq7mz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=708a963b8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=242 identity=21879 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=708a963b8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=242 identity=21879 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=708a963b8b endpointID=242 k8sNamespace=openstack k8sPodName=staffeln-db-init-6prxb subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=d927a7f7-f833-4923-805f-bef940a64235 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=d927a7f7-f833-4923-805f-bef940a64235 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=708a963b8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=242 identity=21879 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-init-6prxb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 25fce17b-a6b4-4832-8ca5-a464206d1587 default }" containerID=0a8e95347dab3ba17f0835eadc6eee24e701bd3c97f4756f446e4734d55e79c5 datapathConfiguration="&{false false false false false }" interface=lxc1c05a2e18375 k8sPodName=openstack/staffeln-db-sync-djctt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a8e95347d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a8e95347d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a8e95347d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=5597 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=9eafd0a6-5ac4-4615-adcd-4c99c4c0d44e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a8e95347d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=925 identity=5597 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a8e95347d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=925 identity=5597 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a8e95347d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=925 identity=5597 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/staffeln-db-sync-djctt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager