level=info msg="Memory available for map entries (0.003% of 16764952576B): 41912381B" subsys=config
level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config
level=info msg="option bpf-nat-global-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147060" subsys=config
level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config
level=info msg="  --agent-health-port='9879'" subsys=daemon
level=info msg="  --agent-labels=''" subsys=daemon
level=info msg="  --agent-liveness-update-interval='1s'" subsys=daemon
level=info msg="  --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon
level=info msg="  --allocator-list-timeout='3m0s'" subsys=daemon
level=info msg="  --allow-icmp-frag-needed='true'" subsys=daemon
level=info msg="  --allow-localhost='auto'" subsys=daemon
level=info msg="  --annotate-k8s-node='false'" subsys=daemon
level=info msg="  --api-rate-limit=''" subsys=daemon
level=info msg="  --arping-refresh-period='30s'" subsys=daemon
level=info msg="  --auto-create-cilium-node-resource='true'" subsys=daemon
level=info msg="  --auto-direct-node-routes='false'" subsys=daemon
level=info msg="  --bgp-announce-lb-ip='false'" subsys=daemon
level=info msg="  --bgp-announce-pod-cidr='false'" subsys=daemon
level=info msg="  --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon
level=info msg="  --bpf-auth-map-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-global-any-max='262144'" subsys=daemon
level=info msg="  --bpf-ct-global-tcp-max='524288'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-any='1m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon
level=info msg="  --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon
level=info msg="  --bpf-filter-priority='1'" subsys=daemon
level=info msg="  --bpf-fragments-map-max='8192'" subsys=daemon
level=info msg="  --bpf-lb-acceleration='disabled'" subsys=daemon
level=info msg="  --bpf-lb-affinity-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-algorithm='random'" subsys=daemon
level=info msg="  --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon
level=info msg="  --bpf-lb-dsr-dispatch='opt'" subsys=daemon
level=info msg="  --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon
level=info msg="  --bpf-lb-external-clusterip='false'" subsys=daemon
level=info msg="  --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon
level=info msg="  --bpf-lb-maglev-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-maglev-table-size='16381'" subsys=daemon
level=info msg="  --bpf-lb-map-max='65536'" subsys=daemon
level=info msg="  --bpf-lb-mode='snat'" subsys=daemon
level=info msg="  --bpf-lb-rev-nat-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon
level=info msg="  --bpf-lb-service-backend-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-service-map-max='0'" subsys=daemon
level=info msg="  --bpf-lb-sock='false'" subsys=daemon
level=info msg="  --bpf-lb-sock-hostns-only='false'" subsys=daemon
level=info msg="  --bpf-lb-source-range-map-max='0'" subsys=daemon
level=info msg="  --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon
level=info msg="  --bpf-map-event-buffers=''" subsys=daemon
level=info msg="  --bpf-nat-global-max='524288'" subsys=daemon
level=info msg="  --bpf-neigh-global-max='524288'" subsys=daemon
level=info msg="  --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon
level=info msg="  --bpf-policy-map-max='16384'" subsys=daemon
level=info msg="  --bpf-root='/sys/fs/bpf'" subsys=daemon
level=info msg="  --bpf-sock-rev-map-max='262144'" subsys=daemon
level=info msg="  --bypass-ip-availability-upon-restore='false'" subsys=daemon
level=info msg="  --certificates-directory='/var/run/cilium/certs'" subsys=daemon
level=info msg="  --cflags=''" subsys=daemon
level=info msg="  --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon
level=info msg="  --cilium-endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --cluster-health-port='4240'" subsys=daemon
level=info msg="  --cluster-id='0'" subsys=daemon
level=info msg="  --cluster-name='default'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon
level=info msg="  --cluster-pool-ipv4-mask-size='24'" subsys=daemon
level=info msg="  --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon
level=info msg="  --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon
level=info msg="  --cmdref=''" subsys=daemon
level=info msg="  --cni-chaining-mode='none'" subsys=daemon
level=info msg="  --cni-chaining-target=''" subsys=daemon
level=info msg="  --cni-exclusive='true'" subsys=daemon
level=info msg="  --cni-external-routing='false'" subsys=daemon
level=info msg="  --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon
level=info msg="  --cnp-node-status-gc-interval='0s'" subsys=daemon
level=info msg="  --config=''" subsys=daemon
level=info msg="  --config-dir='/tmp/cilium/config-map'" subsys=daemon
level=info msg="  --config-sources='config-map:kube-system/cilium-config'" subsys=daemon
level=info msg="  --conntrack-gc-interval='0s'" subsys=daemon
level=info msg="  --conntrack-gc-max-interval='0s'" subsys=daemon
level=info msg="  --crd-wait-timeout='5m0s'" subsys=daemon
level=info msg="  --custom-cni-conf='false'" subsys=daemon
level=info msg="  --datapath-mode='veth'" subsys=daemon
level=info msg="  --debug='false'" subsys=daemon
level=info msg="  --debug-verbose=''" subsys=daemon
level=info msg="  --derive-masquerade-ip-addr-from-device=''" subsys=daemon
level=info msg="  --devices=''" subsys=daemon
level=info msg="  --direct-routing-device=''" subsys=daemon
level=info msg="  --disable-cnp-status-updates='true'" subsys=daemon
level=info msg="  --disable-endpoint-crd='false'" subsys=daemon
level=info msg="  --disable-envoy-version-check='false'" subsys=daemon
level=info msg="  --disable-iptables-feeder-rules=''" subsys=daemon
level=info msg="  --dns-max-ips-per-restored-rule='1000'" subsys=daemon
level=info msg="  --dns-policy-unload-on-shutdown='false'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-limit='0'" subsys=daemon
level=info msg="  --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon
level=info msg="  --dnsproxy-enable-transparent-mode='true'" subsys=daemon
level=info msg="  --dnsproxy-lock-count='128'" subsys=daemon
level=info msg="  --dnsproxy-lock-timeout='500ms'" subsys=daemon
level=info msg="  --egress-gateway-policy-map-max='16384'" subsys=daemon
level=info msg="  --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon
level=info msg="  --egress-masquerade-interfaces=''" subsys=daemon
level=info msg="  --egress-multi-home-ip-rule-compat='false'" subsys=daemon
level=info msg="  --enable-auto-protect-node-port-range='true'" subsys=daemon
level=info msg="  --enable-bandwidth-manager='false'" subsys=daemon
level=info msg="  --enable-bbr='false'" subsys=daemon
level=info msg="  --enable-bgp-control-plane='false'" subsys=daemon
level=info msg="  --enable-bpf-clock-probe='false'" subsys=daemon
level=info msg="  --enable-bpf-masquerade='false'" subsys=daemon
level=info msg="  --enable-bpf-tproxy='false'" subsys=daemon
level=info msg="  --enable-cilium-api-server-access='*'" subsys=daemon
level=info msg="  --enable-cilium-endpoint-slice='false'" subsys=daemon
level=info msg="  --enable-cilium-health-api-server-access='*'" subsys=daemon
level=info msg="  --enable-custom-calls='false'" subsys=daemon
level=info msg="  --enable-endpoint-health-checking='true'" subsys=daemon
level=info msg="  --enable-endpoint-routes='false'" subsys=daemon
level=info msg="  --enable-envoy-config='false'" subsys=daemon
level=info msg="  --enable-external-ips='false'" subsys=daemon
level=info msg="  --enable-health-check-nodeport='true'" subsys=daemon
level=info msg="  --enable-health-checking='true'" subsys=daemon
level=info msg="  --enable-high-scale-ipcache='false'" subsys=daemon
level=info msg="  --enable-host-firewall='false'" subsys=daemon
level=info msg="  --enable-host-legacy-routing='false'" subsys=daemon
level=info msg="  --enable-host-port='false'" subsys=daemon
level=info msg="  --enable-hubble='false'" subsys=daemon
level=info msg="  --enable-hubble-recorder-api='true'" subsys=daemon
level=info msg="  --enable-icmp-rules='true'" subsys=daemon
level=info msg="  --enable-identity-mark='true'" subsys=daemon
level=info msg="  --enable-ip-masq-agent='false'" subsys=daemon
level=info msg="  --enable-ipsec='false'" subsys=daemon
level=info msg="  --enable-ipsec-key-watcher='true'" subsys=daemon
level=info msg="  --enable-ipv4='true'" subsys=daemon
level=info msg="  --enable-ipv4-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv4-egress-gateway='false'" subsys=daemon
level=info msg="  --enable-ipv4-fragment-tracking='true'" subsys=daemon
level=info msg="  --enable-ipv4-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6='false'" subsys=daemon
level=info msg="  --enable-ipv6-big-tcp='false'" subsys=daemon
level=info msg="  --enable-ipv6-masquerade='true'" subsys=daemon
level=info msg="  --enable-ipv6-ndp='false'" subsys=daemon
level=info msg="  --enable-k8s='true'" subsys=daemon
level=info msg="  --enable-k8s-api-discovery='false'" subsys=daemon
level=info msg="  --enable-k8s-endpoint-slice='true'" subsys=daemon
level=info msg="  --enable-k8s-event-handover='false'" subsys=daemon
level=info msg="  --enable-k8s-networkpolicy='true'" subsys=daemon
level=info msg="  --enable-k8s-terminating-endpoint='true'" subsys=daemon
level=info msg="  --enable-l2-announcements='false'" subsys=daemon
level=info msg="  --enable-l2-neigh-discovery='true'" subsys=daemon
level=info msg="  --enable-l2-pod-announcements='false'" subsys=daemon
level=info msg="  --enable-l7-proxy='true'" subsys=daemon
level=info msg="  --enable-local-node-route='true'" subsys=daemon
level=info msg="  --enable-local-redirect-policy='false'" subsys=daemon
level=info msg="  --enable-mke='false'" subsys=daemon
level=info msg="  --enable-monitor='true'" subsys=daemon
level=info msg="  --enable-nat46x64-gateway='false'" subsys=daemon
level=info msg="  --enable-node-port='false'" subsys=daemon
level=info msg="  --enable-pmtu-discovery='false'" subsys=daemon
level=info msg="  --enable-policy='default'" subsys=daemon
level=info msg="  --enable-recorder='false'" subsys=daemon
level=info msg="  --enable-remote-node-identity='true'" subsys=daemon
level=info msg="  --enable-runtime-device-detection='false'" subsys=daemon
level=info msg="  --enable-sctp='false'" subsys=daemon
level=info msg="  --enable-service-topology='false'" subsys=daemon
level=info msg="  --enable-session-affinity='false'" subsys=daemon
level=info msg="  --enable-srv6='false'" subsys=daemon
level=info msg="  --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon
level=info msg="  --enable-svc-source-range-check='true'" subsys=daemon
level=info msg="  --enable-tracing='false'" subsys=daemon
level=info msg="  --enable-unreachable-routes='false'" subsys=daemon
level=info msg="  --enable-vtep='false'" subsys=daemon
level=info msg="  --enable-well-known-identities='false'" subsys=daemon
level=info msg="  --enable-wireguard='false'" subsys=daemon
level=info msg="  --enable-wireguard-userspace-fallback='false'" subsys=daemon
level=info msg="  --enable-xdp-prefilter='false'" subsys=daemon
level=info msg="  --enable-xt-socket-fallback='true'" subsys=daemon
level=info msg="  --encrypt-interface=''" subsys=daemon
level=info msg="  --encrypt-node='false'" subsys=daemon
level=info msg="  --endpoint-gc-interval='5m0s'" subsys=daemon
level=info msg="  --endpoint-queue-size='25'" subsys=daemon
level=info msg="  --endpoint-status=''" subsys=daemon
level=info msg="  --envoy-config-timeout='2m0s'" subsys=daemon
level=info msg="  --envoy-log=''" subsys=daemon
level=info msg="  --exclude-local-address=''" subsys=daemon
level=info msg="  --external-envoy-proxy='false'" subsys=daemon
level=info msg="  --fixed-identity-mapping=''" subsys=daemon
level=info msg="  --fqdn-regex-compile-lru-size='1024'" subsys=daemon
level=info msg="  --gops-port='9890'" subsys=daemon
level=info msg="  --http-403-msg=''" subsys=daemon
level=info msg="  --http-idle-timeout='0'" subsys=daemon
level=info msg="  --http-max-grpc-timeout='0'" subsys=daemon
level=info msg="  --http-normalize-path='true'" subsys=daemon
level=info msg="  --http-request-timeout='3600'" subsys=daemon
level=info msg="  --http-retry-count='3'" subsys=daemon
level=info msg="  --http-retry-timeout='0'" subsys=daemon
level=info msg="  --hubble-disable-tls='false'" subsys=daemon
level=info msg="  --hubble-event-buffer-capacity='4095'" subsys=daemon
level=info msg="  --hubble-event-queue-size='0'" subsys=daemon
level=info msg="  --hubble-export-file-compress='false'" subsys=daemon
level=info msg="  --hubble-export-file-max-backups='5'" subsys=daemon
level=info msg="  --hubble-export-file-max-size-mb='10'" subsys=daemon
level=info msg="  --hubble-export-file-path=''" subsys=daemon
level=info msg="  --hubble-listen-address=''" subsys=daemon
level=info msg="  --hubble-metrics=''" subsys=daemon
level=info msg="  --hubble-metrics-server=''" subsys=daemon
level=info msg="  --hubble-monitor-events=''" subsys=daemon
level=info msg="  --hubble-prefer-ipv6='false'" subsys=daemon
level=info msg="  --hubble-recorder-sink-queue-size='1024'" subsys=daemon
level=info msg="  --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon
level=info msg="  --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon
level=info msg="  --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon
level=info msg="  --hubble-tls-cert-file=''" subsys=daemon
level=info msg="  --hubble-tls-client-ca-files=''" subsys=daemon
level=info msg="  --hubble-tls-key-file=''" subsys=daemon
level=info msg="  --identity-allocation-mode='crd'" subsys=daemon
level=info msg="  --identity-change-grace-period='5s'" subsys=daemon
level=info msg="  --identity-gc-interval='15m0s'" subsys=daemon
level=info msg="  --identity-heartbeat-timeout='30m0s'" subsys=daemon
level=info msg="  --identity-restore-grace-period='10m0s'" subsys=daemon
level=info msg="  --install-egress-gateway-routes='false'" subsys=daemon
level=info msg="  --install-iptables-rules='true'" subsys=daemon
level=info msg="  --install-no-conntrack-iptables-rules='false'" subsys=daemon
level=info msg="  --ip-allocation-timeout='2m0s'" subsys=daemon
level=info msg="  --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon
level=info msg="  --ipam='cluster-pool'" subsys=daemon
level=info msg="  --ipam-cilium-node-update-rate='15s'" subsys=daemon
level=info msg="  --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon
level=info msg="  --ipsec-key-file=''" subsys=daemon
level=info msg="  --ipsec-key-rotation-duration='5m0s'" subsys=daemon
level=info msg="  --iptables-lock-timeout='5s'" subsys=daemon
level=info msg="  --iptables-random-fully='false'" subsys=daemon
level=info msg="  --ipv4-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv4-node='auto'" subsys=daemon
level=info msg="  --ipv4-pod-subnets=''" subsys=daemon
level=info msg="  --ipv4-range='auto'" subsys=daemon
level=info msg="  --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon
level=info msg="  --ipv4-service-range='auto'" subsys=daemon
level=info msg="  --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon
level=info msg="  --ipv6-mcast-device=''" subsys=daemon
level=info msg="  --ipv6-native-routing-cidr=''" subsys=daemon
level=info msg="  --ipv6-node='auto'" subsys=daemon
level=info msg="  --ipv6-pod-subnets=''" subsys=daemon
level=info msg="  --ipv6-range='auto'" subsys=daemon
level=info msg="  --ipv6-service-range='auto'" subsys=daemon
level=info msg="  --join-cluster='false'" subsys=daemon
level=info msg="  --k8s-api-server=''" subsys=daemon
level=info msg="  --k8s-client-burst='10'" subsys=daemon
level=info msg="  --k8s-client-qps='5'" subsys=daemon
level=info msg="  --k8s-heartbeat-timeout='30s'" subsys=daemon
level=info msg="  --k8s-kubeconfig-path=''" subsys=daemon
level=info msg="  --k8s-namespace='kube-system'" subsys=daemon
level=info msg="  --k8s-require-ipv4-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-require-ipv6-pod-cidr='false'" subsys=daemon
level=info msg="  --k8s-service-cache-size='128'" subsys=daemon
level=info msg="  --k8s-service-proxy-name=''" subsys=daemon
level=info msg="  --k8s-sync-timeout='3m0s'" subsys=daemon
level=info msg="  --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon
level=info msg="  --keep-config='false'" subsys=daemon
level=info msg="  --kube-proxy-replacement='disabled'" subsys=daemon
level=info msg="  --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon
level=info msg="  --kvstore=''" subsys=daemon
level=info msg="  --kvstore-connectivity-timeout='2m0s'" subsys=daemon
level=info msg="  --kvstore-lease-ttl='15m0s'" subsys=daemon
level=info msg="  --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon
level=info msg="  --kvstore-opt=''" subsys=daemon
level=info msg="  --kvstore-periodic-sync='5m0s'" subsys=daemon
level=info msg="  --l2-announcements-lease-duration='15s'" subsys=daemon
level=info msg="  --l2-announcements-renew-deadline='5s'" subsys=daemon
level=info msg="  --l2-announcements-retry-period='2s'" subsys=daemon
level=info msg="  --l2-pod-announcements-interface=''" subsys=daemon
level=info msg="  --label-prefix-file=''" subsys=daemon
level=info msg="  --labels=''" subsys=daemon
level=info msg="  --lib-dir='/var/lib/cilium'" subsys=daemon
level=info msg="  --local-max-addr-scope='252'" subsys=daemon
level=info msg="  --local-router-ipv4=''" subsys=daemon
level=info msg="  --local-router-ipv6=''" subsys=daemon
level=info msg="  --log-driver=''" subsys=daemon
level=info msg="  --log-opt=''" subsys=daemon
level=info msg="  --log-system-load='false'" subsys=daemon
level=info msg="  --max-controller-interval='0'" subsys=daemon
level=info msg="  --mesh-auth-enabled='true'" subsys=daemon
level=info msg="  --mesh-auth-gc-interval='5m0s'" subsys=daemon
level=info msg="  --mesh-auth-mutual-listener-port='0'" subsys=daemon
level=info msg="  --mesh-auth-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon
level=info msg="  --mesh-auth-signal-backoff-duration='1s'" subsys=daemon
level=info msg="  --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon
level=info msg="  --mesh-auth-spire-admin-socket=''" subsys=daemon
level=info msg="  --metrics=''" subsys=daemon
level=info msg="  --mke-cgroup-mount=''" subsys=daemon
level=info msg="  --monitor-aggregation='medium'" subsys=daemon
level=info msg="  --monitor-aggregation-flags='all'" subsys=daemon
level=info msg="  --monitor-aggregation-interval='5s'" subsys=daemon
level=info msg="  --monitor-queue-size='0'" subsys=daemon
level=info msg="  --mtu='0'" subsys=daemon
level=info msg="  --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon
level=info msg="  --node-port-acceleration='disabled'" subsys=daemon
level=info msg="  --node-port-algorithm='random'" subsys=daemon
level=info msg="  --node-port-bind-protection='true'" subsys=daemon
level=info msg="  --node-port-mode='snat'" subsys=daemon
level=info msg="  --node-port-range='30000,32767'" subsys=daemon
level=info msg="  --nodes-gc-interval='5m0s'" subsys=daemon
level=info msg="  --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon
level=info msg="  --policy-audit-mode='false'" subsys=daemon
level=info msg="  --policy-queue-size='100'" subsys=daemon
level=info msg="  --policy-trigger-interval='1s'" subsys=daemon
level=info msg="  --pprof='false'" subsys=daemon
level=info msg="  --pprof-address='localhost'" subsys=daemon
level=info msg="  --pprof-port='6060'" subsys=daemon
level=info msg="  --preallocate-bpf-maps='false'" subsys=daemon
level=info msg="  --prepend-iptables-chains='true'" subsys=daemon
level=info msg="  --procfs='/host/proc'" subsys=daemon
level=info msg="  --prometheus-serve-addr=':9962'" subsys=daemon
level=info msg="  --proxy-connect-timeout='2'" subsys=daemon
level=info msg="  --proxy-gid='1337'" subsys=daemon
level=info msg="  --proxy-idle-timeout-seconds='60'" subsys=daemon
level=info msg="  --proxy-max-connection-duration-seconds='0'" subsys=daemon
level=info msg="  --proxy-max-requests-per-connection='0'" subsys=daemon
level=info msg="  --proxy-prometheus-port='9964'" subsys=daemon
level=info msg="  --read-cni-conf=''" subsys=daemon
level=info msg="  --remove-cilium-node-taints='true'" subsys=daemon
level=info msg="  --restore='true'" subsys=daemon
level=info msg="  --route-metric='0'" subsys=daemon
level=info msg="  --routing-mode='tunnel'" subsys=daemon
level=info msg="  --set-cilium-is-up-condition='true'" subsys=daemon
level=info msg="  --set-cilium-node-taints='true'" subsys=daemon
level=info msg="  --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon
level=info msg="  --single-cluster-route='false'" subsys=daemon
level=info msg="  --skip-cnp-status-startup-clean='false'" subsys=daemon
level=info msg="  --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon
level=info msg="  --srv6-encap-mode='reduced'" subsys=daemon
level=info msg="  --state-dir='/var/run/cilium'" subsys=daemon
level=info msg="  --synchronize-k8s-nodes='true'" subsys=daemon
level=info msg="  --tofqdns-dns-reject-response-code='refused'" subsys=daemon
level=info msg="  --tofqdns-enable-dns-compression='true'" subsys=daemon
level=info msg="  --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon
level=info msg="  --tofqdns-idle-connection-grace-period='0s'" subsys=daemon
level=info msg="  --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon
level=info msg="  --tofqdns-min-ttl='0'" subsys=daemon
level=info msg="  --tofqdns-pre-cache=''" subsys=daemon
level=info msg="  --tofqdns-proxy-port='0'" subsys=daemon
level=info msg="  --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon
level=info msg="  --trace-payloadlen='128'" subsys=daemon
level=info msg="  --trace-sock='true'" subsys=daemon
level=info msg="  --tunnel=''" subsys=daemon
level=info msg="  --tunnel-port='6082'" subsys=daemon
level=info msg="  --tunnel-protocol='geneve'" subsys=daemon
level=info msg="  --unmanaged-pod-watcher-interval='15'" subsys=daemon
level=info msg="  --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon
level=info msg="  --version='false'" subsys=daemon
level=info msg="  --vlan-bpf-bypass=''" subsys=daemon
level=info msg="  --vtep-cidr=''" subsys=daemon
level=info msg="  --vtep-endpoint=''" subsys=daemon
level=info msg="  --vtep-mac=''" subsys=daemon
level=info msg="  --vtep-mask=''" subsys=daemon
level=info msg="  --wireguard-encapsulate='false'" subsys=daemon
level=info msg="  --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon
level=info msg="     _ _ _" subsys=daemon
level=info msg=" ___|_| |_|_ _ _____" subsys=daemon
level=info msg="|  _| | | | | |     |" subsys=daemon
level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon
level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon
level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath
level=info msg="linking environment: OK!" subsys=linux-datapath
level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes
level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf
level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups
level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter
level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter
level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter
level=info msg=" - reserved:.*" subsys=labels-filter
level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter
level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter
level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:io\\.kubernetes" subsys=labels-filter
level=info msg=" - !:kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter
level=info msg=" - !:k8s\\.io" subsys=labels-filter
level=info msg=" - !:pod-template-generation" subsys=labels-filter
level=info msg=" - !:pod-template-hash" subsys=labels-filter
level=info msg=" - !:controller-revision-hash" subsys=labels-filter
level=info msg=" - !:annotation.*" subsys=labels-filter
level=info msg=" - !:etcd_node" subsys=labels-filter
level=info msg=Invoked duration="937.798µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive
level=info msg=Invoked duration="59.951µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive
level=info msg=Invoked duration=1.040921ms function="metrics.NewRegistry (registry.go:65)" subsys=hive
level=info msg=Invoked duration="9.05µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive
level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate
level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth
level=info msg=Invoked duration=88.337923ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive
level=info msg=Invoked duration="14.111µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive
level=info msg=Invoked duration="17.551µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive
level=info msg=Invoked duration="66.921µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive
level=info msg=Invoked duration="63.171µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive
level=info msg=Invoked duration="90.142µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive
level=info msg=Starting subsys=hive
level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops
level=info msg="Start hook executed" duration="392.068µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive
level=info msg="Start hook executed" duration="6.62µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive
level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client
level=info msg="Serving prometheus metrics on :9962" subsys=metrics
level=info msg="Connected to apiserver" subsys=k8s-client
level=info msg="Start hook executed" duration=9.684841ms function="client.(*compositeClientset).onStart" subsys=hive
level=info msg="Start hook executed" duration=7.264993ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive
level=info msg="Start hook executed" duration="38.391µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="36.471µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive
level=info msg="Start hook executed" duration="211.654µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive
level=info msg="Start hook executed" duration="109.662µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive
level=info msg="Start hook executed" duration="63.861µs" function="*cni.cniConfigManager.Start" subsys=hive
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Generating CNI configuration file with mode none" subsys=cni-config
level=info msg="Start hook executed" duration=49.051718ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive
level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath
level=info msg="Start hook executed" duration="105.412µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive
level=info msg="Start hook executed" duration="5.84µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive
level=info msg="Start hook executed" duration="1.63µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive
level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.161.0.0/16
level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon
level=info msg="Start hook executed" duration=104.046732ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive
level=info msg="Start hook executed" duration="12.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration=101.090544ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive
level=info msg="Start hook executed" duration="18.01µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s
level=info msg="Start hook executed" duration=101.022277ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive
level=info msg="Start hook executed" duration="5.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive
level=info msg="Start hook executed" duration="2.02µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive
level=info msg="Start hook executed" duration="2.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="2.1µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="1.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive
level=info msg="Start hook executed" duration="26.171µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive
level=info msg="Start hook executed" duration="18.401µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive
level=info msg="Start hook executed" duration="61.181µs" function="*manager.manager.Start" subsys=hive
level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent
level=info msg="Start hook executed" duration="444.659µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive
level=info msg="Start hook executed" duration="5.42µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive
level=info msg="Start hook executed" duration="12.351µs" function="*job.group.Start" subsys=hive
level=info msg="Start hook executed" duration="271.796µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive
level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager
level=info msg="Start hook executed" duration="412.788µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive
level=info msg="Datapath signal listener running" subsys=signal
level=info msg="Start hook executed" duration=1.203384ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive
level=info msg="Start hook executed" duration="5.69µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive
level=info msg="Start hook executed" duration="19.89µs" function="*job.group.Start" subsys=hive
level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon
level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon
level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.161 mtu=1500 subsys=mtu
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf
level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf
level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service
level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service
level=info msg="Reading old endpoints..." subsys=daemon
level=info msg="No old endpoints found." subsys=daemon
level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s
level=info msg="All Cilium CRDs have been found and are available" subsys=k8s
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery
level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery
level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery
level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s
level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.161 ipAddr.ipv6="<nil>" k8sNodeIP=199.19.213.161 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon
level=info msg="Detected devices" devices="[]" subsys=linux-datapath
level=info msg="Enabling k8s event listener" subsys=k8s-watcher
level=info msg="Removing stale endpoint interfaces" subsys=daemon
level=info msg="Skipping kvstore configuration" subsys=daemon
level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher
level=info msg="Initializing node addressing" subsys=daemon
level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="<nil>"
level=info msg="Restoring endpoints..." subsys=daemon
level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon
level=info msg="Addressing information:" subsys=daemon
level=info msg="  Cluster-Name: default" subsys=daemon
level=info msg="  Cluster-ID: 0" subsys=daemon
level=info msg="  Local node-name: instance" subsys=daemon
level=info msg="  Node-IPv6: <nil>" subsys=daemon
level=info msg="  External-Node IPv4: 199.19.213.161" subsys=daemon
level=info msg="  Internal-Node IPv4: 10.0.0.232" subsys=daemon
level=info msg="  IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon
level=info msg="  Loopback IPv4: 169.254.42.1" subsys=daemon
level=info msg="  Local IPv4 addresses:" subsys=daemon
level=info msg="  - 199.19.213.161" subsys=daemon
level=info msg="  - 172.17.0.100" subsys=daemon
level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher
level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.161} {CiliumInternalIP 10.0.0.232}] 10.0.0.0/24 [] <nil> [] 10.0.0.135 <nil> <nil> <nil> 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery
level=info msg="Initializing identity allocator" subsys=identity-cache
level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0
level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1
level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0
level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="<nil>" subsys=datapath-loader
level=info msg="Iptables rules installed" subsys=iptables
level=info msg="Adding new proxy port rules for cilium-dns-egress:43903" id=cilium-dns-egress subsys=proxy
level=info msg="Iptables proxy rules installed" subsys=iptables
level=info msg="Start hook executed" duration=2.558207006s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive
level=info msg="Start hook executed" duration="22.16µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive
level=info msg="Start hook executed" duration="8.61µs" function="*job.group.Start" subsys=hive
level=info msg="Starting IP identity watcher" subsys=ipcache
level=info msg="Initializing daemon" subsys=daemon
level=info msg="Validating configured node address ranges" subsys=daemon
level=info msg="Starting connection tracking garbage collector" subsys=daemon
level=info msg="Initial scan of connection tracking completed" subsys=ct-gc
level=info msg="Start hook executed" duration="192.774µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive
level=info msg="Start hook executed" duration="16.32µs" function="*job.group.Start" subsys=hive
level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon
level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0
level=info msg="Creating host endpoint" subsys=daemon
level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=229 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Launching Cilium health daemon" subsys=daemon
level=info msg="Launching Cilium health endpoint" subsys=daemon
level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon
level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon
level=info msg="processing 0 queued deletion requests" subsys=daemon
level=info msg="Initializing Cilium API" subsys=daemon
level=info msg="Daemon initialization completed" bootstrapTime=3.476076456s subsys=daemon
level=info msg="Hubble server is disabled" subsys=hubble
level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon
level=info msg="Compiled new BPF template" BPFCompilationTime=313.379823ms file-path=/var/run/cilium/state/templates/80bcd98529b30efec1c7f33c5d395f73b7c446769e89e0f39ed089dfb3f28ffb/bpf_host.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=229 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 ipv4=10.0.0.135 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identityLabels="reserved:health" ipv4=10.0.0.135 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=372 identity=4 identityLabels="reserved:health" ipv4=10.0.0.135 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint
level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server
level=info msg="Compiled new BPF template" BPFCompilationTime=1.151778771s file-path=/var/run/cilium/state/templates/bcfc7b4b7819523c51ec908b6c32f4debb4f98815b94cb8c932636a2f52789ce/bpf_lxc.o subsys=datapath-loader
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=372 identity=4 ipv4=10.0.0.135 ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.115 c9c3bbc7-5bb8-4359-8b7b-ac3bcec49345 default   }" containerID=f87ba1ae336f9fabc3664ce7a6877ce7d59259c02e50f9b1dc1d9ec35336e1db datapathConfiguration="&{false false false false false <nil>}" interface=lxce981a99fb687 k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f87ba1ae33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f87ba1ae33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f87ba1ae33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=29063 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f87ba1ae33 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=29063 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.53 dda98e5e-b64f-43a7-9797-0deaa21a4ca0 default   }" containerID=41983ce4df74faa1a5964f907e137d9ad8f05dfcbe1025aed339bc2bf0a52477 datapathConfiguration="&{false false false false false <nil>}" interface=lxc943107a2c3f2 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=41983ce4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=41983ce4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=41983ce4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=12937 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=41983ce4df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=12937 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f87ba1ae33 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=716 identity=29063 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f87ba1ae33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=716 identity=29063 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=41983ce4df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3295 identity=12937 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=endpoint
level=info msg="Successful endpoint creation" containerID=41983ce4df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3295 identity=12937 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=41983ce4df endpointID=3295 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-b47hj subsys=daemon
level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=693af6e1-8988-4992-8484-d5de595d0ecf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator
level=info msg="Removed endpoint" containerID=41983ce4df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3295 identity=12937 ipv4=10.0.0.53 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-b47hj subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.246 86e149f8-19ca-4279-8c88-0e6c6812ab7e default   }" containerID=4eb140e78a3a1ff1ade63f0359c3974bab8af87022d80187e3990d869a616868 datapathConfiguration="&{false false false false false <nil>}" interface=lxc4002c31d3424 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4eb140e78a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4eb140e78a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4eb140e78a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=17455 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4eb140e78a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=17455 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=4eb140e78a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=311 identity=17455 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4eb140e78a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=311 identity=17455 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-ljnr6 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=229 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00229 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00229 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00229 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00229:pending" subsys=bpf
level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf
level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf
level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=229 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.141 80cd8cad-8cc0-427b-bbf8-0e1c86636248 default   }" containerID=0f4a96787982aa42b95017ae5392164781fbac792e9be57a8eec663aa84c708e datapathConfiguration="&{false false false false false <nil>}" interface=lxc53e650e8629d k8sPodName=kube-system/coredns-67659f764b-rdps4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0f4a967879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0f4a967879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=0f4a967879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=29063 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0f4a967879 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=455 identity=29063 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.110 42c14dc6-0da7-4c6d-9565-24b248ac30c6 default   }" containerID=8cd1aa9687b25ff4a3cc75d34cc0ebf208c66d991a77de6af8b24877435a08d5 datapathConfiguration="&{false false false false false <nil>}" interface=lxcfe0f1ba38326 k8sPodName=kube-system/coredns-67659f764b-hvxbf labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=8cd1aa9687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=8cd1aa9687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=8cd1aa9687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=29063 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=8cd1aa9687 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1765 identity=29063 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=0f4a967879 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=455 identity=29063 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0f4a967879 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=455 identity=29063 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-rdps4 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=8cd1aa9687 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1765 identity=29063 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf subsys=endpoint
level=info msg="Successful endpoint creation" containerID=8cd1aa9687 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1765 identity=29063 ipv4=10.0.0.110 ipv6= k8sPodName=kube-system/coredns-67659f764b-hvxbf subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.144 9f302eb8-2073-49ac-9c90-70405a8763c8 default   }" containerID=d2ae6f95bc7c09e3f80940254957a0663be6673a315b5a50d70b33347b49bfe7 datapathConfiguration="&{false false false false false <nil>}" interface=lxc01fcd6368db6 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d2ae6f95bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d2ae6f95bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d2ae6f95bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=33702 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d2ae6f95bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=189 identity=33702 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=d2ae6f95bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=189 identity=33702 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d2ae6f95bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=189 identity=33702 ipv4=10.0.0.144 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-t5bqm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=f87ba1ae33 endpointID=716 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-8l4z6 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator
level=info msg="Removed endpoint" containerID=f87ba1ae33 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=716 identity=29063 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-8l4z6 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.87 151bd7f3-2f48-47f6-84d0-e306f3bf6912 default   }" containerID=51a01176d09c255990f26f8740dce94aeea6142112f37aeb5e0d4b592e6deb57 datapathConfiguration="&{false false false false false <nil>}" interface=lxcc3051c18665a k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=51a01176d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=51a01176d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=51a01176d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=7069 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=51a01176d0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3437 identity=7069 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=51a01176d0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3437 identity=7069 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr subsys=endpoint
level=info msg="Successful endpoint creation" containerID=51a01176d0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3437 identity=7069 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-nsvkr subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.151 66376755-f240-4734-946d-77ae5f5c10f5 default   }" containerID=ea110ffa4ccb383e3a5fbe4474b25648c3be1cfd9bc2e5e6048e87cd30539818 datapathConfiguration="&{false false false false false <nil>}" interface=lxceba128cff6a9 k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=ea110ffa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=ea110ffa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=ea110ffa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=36114 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=ea110ffa4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=237 identity=36114 ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=ea110ffa4c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=237 identity=36114 ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=ea110ffa4c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=237 identity=36114 ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.63 102ac0e4-1b69-41dd-bcf4-cce4560c7842 default   }" containerID=4a39d3a8202d7da1627dc6f708966b03f4ecf24396860702f567c4a0cf7b81c2 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8b43a884dfc5 k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4a39d3a820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4a39d3a820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4a39d3a820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=27835 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4a39d3a820 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=27835 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.134 c65dfb51-2761-43d2-9794-db3c32aaa547 default   }" containerID=4e32e469a0bb8118483e1e8d4f09b0be279b5c67dcb5a33f660354984b852010 datapathConfiguration="&{false false false false false <nil>}" interface=lxc33217cc5c824 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4e32e469a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4e32e469a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4e32e469a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=17537 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=4e32e469a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1926 identity=17537 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.168 b6223da9-0549-4d2c-ad9d-5b434858c81c default   }" containerID=21152f746181c7ef36f3c297454170325782230d676412a1118d7c552e9151b1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc0976c7fb7a38 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=21152f7461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=21152f7461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=21152f7461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=26789 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=21152f7461 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=897 identity=26789 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4a39d3a820 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1488 identity=27835 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4a39d3a820 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1488 identity=27835 ipv4=10.0.0.63 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-7t7bg subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=4e32e469a0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1926 identity=17537 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4e32e469a0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1926 identity=17537 ipv4=10.0.0.134 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-khw7k subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=21152f7461 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=897 identity=26789 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=21152f7461 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=897 identity=26789 ipv4=10.0.0.168 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-pxbwg subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.22 b63f5b9d-6165-4257-8bdd-95778b3c505b default   }" containerID=a8ba223c8eb2ec38cd53c6acdff76496bdc20cf1c11ab0983f7e999ca0b94712 datapathConfiguration="&{false false false false false <nil>}" interface=lxc1389ace9b39f k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a8ba223c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a8ba223c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a8ba223c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=59699 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a8ba223c8e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=533 identity=59699 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a8ba223c8e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=533 identity=59699 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a8ba223c8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=533 identity=59699 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=daemon
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=ea110ffa4c endpointID=237 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-xtr45 subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=a5729d51-8abc-4f6f-be27-04b177bb71e1 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator
level=info msg="Removed endpoint" containerID=ea110ffa4c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=237 identity=36114 ipv4=10.0.0.151 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-xtr45 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.88 8cfc3f42-9d5a-4f63-87d2-47bc3cc98850 default   }" containerID=f96c42625ab40f0c70e847a292fb9e63cda4f7570ec3f4a9a6f65331f15c70bb datapathConfiguration="&{false false false false false <nil>}" interface=lxc860318771a3d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=3086 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3461 identity=3086 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f96c42625a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3461 identity=3086 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f96c42625a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3461 identity=3086 ipv4=10.0.0.88 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-k4czd subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.205 0d829145-5839-4224-b5e0-b0f2340cc53f default   }" containerID=7897840e88cf7a0391d19a6dedcbc92283f95c2d9a700bf97d6b5dea5ac5119b datapathConfiguration="&{false false false false false <nil>}" interface=lxc9013bf5ce8b2 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=7897840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=7897840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=7897840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=30664 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=7897840e88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1508 identity=30664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=7897840e88 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1508 identity=30664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=7897840e88 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1508 identity=30664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=7897840e88 endpointID=1508 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vk6r4 subsys=daemon
level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=a8c87d4a-ea9b-4240-9abf-088c61e3ea48 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator
level=info msg="Removed endpoint" containerID=7897840e88 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1508 identity=30664 ipv4=10.0.0.205 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vk6r4 subsys=endpoint
level=info msg="Delete endpoint request" containerID=a8ba223c8e endpointID=533 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-tt6lh subsys=daemon
level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=3ac7b2dc-deca-4e43-ae59-3cd7d82825d8 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator
level=info msg="Removed endpoint" containerID=a8ba223c8e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=533 identity=59699 ipv4=10.0.0.22 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tt6lh subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.92 ffec46a9-a0a3-4d54-a158-11feb52b0e9c default   }" containerID=b829063b743ce90739105595fc4dc7d4e2bbc7874a8972849846cac70bb430ba datapathConfiguration="&{false false false false false <nil>}" interface=lxca6a54cc320a4 k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b829063b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b829063b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b829063b74 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=46375 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b829063b74 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=658 identity=46375 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=b829063b74 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=658 identity=46375 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b829063b74 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=658 identity=46375 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-6lddl subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=69d2e329-ee65-4ccb-b725-eb2c505a8936] Description:}]" policyAddRequest=cf9cdf65-6be9-45a4-afbc-6278cc2ead6a subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=cf9cdf65-6be9-45a4-afbc-6278cc2ead6a policyRevision=2 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=d629fb34-5d51-47c9-ad84-71bbaaa9fa8c] Description:}]" policyAddRequest=be5f16a3-4189-4fc9-8c93-860640887ac0 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher
level=info msg="Policy imported via API, recalculating..." policyAddRequest=be5f16a3-4189-4fc9-8c93-860640887ac0 policyRevision=3 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.32 f9b64cbe-493f-4afa-a6f1-56312a5fe5b5 default   }" containerID=a2a5dbcdc352543fc4d4e1079d97ea050be0f62778ca5fe093a9a5dbbd8d82df datapathConfiguration="&{false false false false false <nil>}" interface=lxcb4218a7fc9df k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=11890 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=599 identity=11890 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=a2a5dbcdc3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=599 identity=11890 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a2a5dbcdc3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=599 identity=11890 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-b4z79 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.15 2d2cc172-e9b9-4a53-ab53-d245b4913e90 default   }" containerID=e2afc32a9b15c4aea0181faefac6e085e692c2bae52a4fa9e83eb6078b1dfd64 datapathConfiguration="&{false false false false false <nil>}" interface=lxc153ad2b5de43 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e2afc32a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e2afc32a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=e2afc32a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=50601 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e2afc32a9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=374 identity=50601 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e2afc32a9b datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=374 identity=50601 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e2afc32a9b datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=374 identity=50601 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-dvqgt subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=27fec19f-06fa-4280-8c3c-864f77dd2493] Description:}]" policyAddRequest=84343c0f-cc61-476c-ac74-07807bea23b2 subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=84343c0f-cc61-476c-ac74-07807bea23b2 policyRevision=4 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.211 6a34635d-0eca-4ea3-a098-55d76048e6c5 default   }" containerID=2ac00b1c3ab57ea4b1f6cc2c4a9efe3a48c775e89bd0bd9472c1cba185cd1e95 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf61a111eab09 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2ac00b1c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2ac00b1c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2ac00b1c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=9303 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=2ac00b1c3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=83 identity=9303 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=2ac00b1c3a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=83 identity=9303 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2ac00b1c3a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=83 identity=9303 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.169 d7216b0d-d5e3-4587-b6a3-4139bad1c64f default   }" containerID=c31e72be1942357854a49fe9c4dded276ef9ffc17fe083c91c19fe9c1573478e datapathConfiguration="&{false false false false false <nil>}" interface=lxc0329df438853 k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=c31e72be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3654 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=c31e72be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3654 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=c31e72be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3654 identity=54708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=c31e72be19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3654 identity=54708 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=c31e72be19 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3654 identity=54708 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=c31e72be19 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3654 identity=54708 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.79 784a0c09-4605-4221-8051-29f28f81ac72 default   }" containerID=beec280c3f49a706931954130dd9fa419c827ecd28dd75cfe2d507002a66364d datapathConfiguration="&{false false false false false <nil>}" interface=lxc9d8cf90b01e5 k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=beec280c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=beec280c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=beec280c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=54708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=beec280c3f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=54708 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=beec280c3f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=926 identity=54708 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=endpoint
level=info msg="Successful endpoint creation" containerID=beec280c3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=926 identity=54708 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=c31e72be19 endpointID=3654 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=c31e72be19 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3654 identity=54708 ipv4=10.0.0.169 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2405716e-15c6-4784-bf44-982f49470ffb subsys=endpoint
level=info msg="Delete endpoint request" containerID=beec280c3f endpointID=926 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=beec280c3f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=926 identity=54708 ipv4=10.0.0.79 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-438e4a58-ee2f-4eb7-af6e-7ff9ece3070b subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.47 40621183-2d54-4131-8239-db2fcaa437e5 default   }" containerID=d4bbe31d9f3c86f8b67cb1295f08d97c2c5804d2ce6f588e21c809faa85abc6c datapathConfiguration="&{false false false false false <nil>}" interface=lxccaea31808662 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator
level=info msg="Invalid state transition skipped" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 line=611 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=61404 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2444 identity=61404 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=d4bbe31d9f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2444 identity=61404 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d4bbe31d9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2444 identity=61404 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.71 ff206a3d-90bd-477e-913c-ee2a45a4a22a default   }" containerID=5f2190ffa4e7b592ec803ccfcf8bc17e3e60d3ab9e3d8131b045a07c07d63645 datapathConfiguration="&{false false false false false <nil>}" interface=lxce6f3bdca5854 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=5f2190ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=5f2190ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=5f2190ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=10457 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=5f2190ffa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1284 identity=10457 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=5f2190ffa4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1284 identity=10457 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=5f2190ffa4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1284 identity=10457 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS:<nil> OriginatingTLS:<nil> ServerNames:[] Listener:<nil> Rules:<nil>}] ICMPs:[] Authentication:<nil>}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:<nil>}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f1bd0312-d704-445b-bc9f-b144e76c9ddc] Description:}]" policyAddRequest=1d8d1ef7-32cf-4889-b191-139ace6f4a7d subsys=daemon
level=info msg="Policy imported via API, recalculating..." policyAddRequest=1d8d1ef7-32cf-4889-b191-139ace6f4a7d policyRevision=5 subsys=daemon
level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher
level=info msg="Create endpoint request" addressing="&{10.0.0.18 434dcf48-6ddf-4fec-bbef-fa511828dd79 default   }" containerID=cecb8ee82593d03bb6825a20abab78e0febfdd700de022be96ce021fcc7580eb datapathConfiguration="&{false false false false false <nil>}" interface=lxc6f810be8f53f k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=cecb8ee825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=cecb8ee825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=cecb8ee825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=54708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=cecb8ee825 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=183 identity=54708 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=cecb8ee825 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=183 identity=54708 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=cecb8ee825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=54708 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.247 cebc54d4-309f-448e-88a5-8a4cac812965 default   }" containerID=47d89b51f3ddbd795e0079bdc48c9f19d27f68d96810ffb09296548a693396a1 datapathConfiguration="&{false false false false false <nil>}" interface=lxc3f381aacd363 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=47d89b51f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=47d89b51f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=47d89b51f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=57373 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=47d89b51f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=57373 ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=47d89b51f3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=57373 ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=47d89b51f3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=57373 ipv4=10.0.0.247 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=cecb8ee825 endpointID=183 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=cecb8ee825 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=183 identity=54708 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a306577-59d6-4f09-a6b1-84c0736a4365 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.112 5fcae7a7-cb55-4699-8db4-d78889a6a254 default   }" containerID=4253288bbdf0b784407d7f2ea83a73190118ee37c4c350828adf04f37418cd0f datapathConfiguration="&{false false false false false <nil>}" interface=lxc6af09a69b892 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=4253288bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=4253288bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=4253288bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=18504 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Waiting for endpoint to be generated" containerID=4253288bbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3295 identity=18504 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=4253288bbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3295 identity=18504 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=4253288bbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3295 identity=18504 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.015735074119407045 newInterval=7m30s subsys=map-ct
level=info msg="Create endpoint request" addressing="&{10.0.0.179 3a69585e-2dd6-4d80-bea3-fd6e52a304ad default   }" containerID=162b8a5bde3a7cb308b00d8b36e707c9f1e031a1f7d6208ba8f6f6c250c02a77 datapathConfiguration="&{false false false false false <nil>}" interface=lxc224a1aeb3d3c k8sPodName=openstack/keystone-credential-setup-rlzsp labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=162b8a5bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=162b8a5bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=162b8a5bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=20789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=162b8a5bde datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=878 identity=20789 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=162b8a5bde datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=878 identity=20789 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=endpoint
level=info msg="Successful endpoint creation" containerID=162b8a5bde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=20789 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=daemon
level=info msg="Delete endpoint request" containerID=162b8a5bde endpointID=878 k8sNamespace=openstack k8sPodName=keystone-credential-setup-rlzsp subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=56aa5715-bf96-40ed-b99e-4655ce2936fc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=162b8a5bde datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=878 identity=20789 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-credential-setup-rlzsp subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.105 decbdcd5-30b6-4426-80b5-8940c935c5cb default   }" containerID=3d0774cdcb84ff0a4b5b8ba97af52cf8d5bd9c31b4f54f3ef022bec2e3bc5f74 datapathConfiguration="&{false false false false false <nil>}" interface=lxc037371b09a12 k8sPodName=openstack/keystone-db-init-httwm labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=15681 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2736 identity=15681 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3d0774cdcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2736 identity=15681 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3d0774cdcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2736 identity=15681 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=3d0774cdcb endpointID=2736 k8sNamespace=openstack k8sPodName=keystone-db-init-httwm subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=11da4b1c-eea2-4bf2-81f5-a2b79e7fc56c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=3d0774cdcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2736 identity=15681 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-init-httwm subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.148 b064a3fe-2d3c-4699-bcdf-b4c22aaa8e6a default   }" containerID=74dd44c897a7ff2c210b287b1c0fc34d7ae4e9849ef9f0338fed10e522b8dd67 datapathConfiguration="&{false false false false false <nil>}" interface=lxc2e06f5402015 k8sPodName=openstack/keystone-fernet-setup-df24v labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=74dd44c897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=74dd44c897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=74dd44c897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=32525 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=74dd44c897 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1236 identity=32525 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=74dd44c897 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1236 identity=32525 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=endpoint
level=info msg="Successful endpoint creation" containerID=74dd44c897 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=32525 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=74dd44c897 endpointID=1236 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-df24v subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=94c234f1-0b7b-449c-bb24-2a793cd60838 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=74dd44c897 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1236 identity=32525 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-fernet-setup-df24v subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.233 bd940366-d1e6-413a-a4a4-304680348fcc default   }" containerID=bc724e7c4156ec13df6b78ce5ab586a98dc72d00c2e6364473734023d8a94e75 datapathConfiguration="&{false false false false false <nil>}" interface=lxcac2379ac516e k8sPodName=openstack/keystone-db-sync-pktxg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=62058 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1281 identity=62058 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=bc724e7c41 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1281 identity=62058 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=bc724e7c41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=62058 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=bc724e7c41 endpointID=1281 k8sNamespace=openstack k8sPodName=keystone-db-sync-pktxg subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=5d4e33a2-83f0-4f8e-8288-47d7ebfd10a9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=bc724e7c41 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1281 identity=62058 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/keystone-db-sync-pktxg subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.249 66552f3d-d057-4205-a438-4c945d3d05c9 default   }" containerID=3b61700b34a6ec0202006ad954ff933ed9a32bf3ff09f864c0ac0549e0dd5261 datapathConfiguration="&{false false false false false <nil>}" interface=lxced62eb0d38d4 k8sPodName=openstack/keystone-rabbit-init-746j9 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10602d83-decb-409f-a572-7300c6049767,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10602d83-decb-409f-a572-7300c6049767,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=10602d83-decb-409f-a572-7300c6049767;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=10602d83-decb-409f-a572-7300c6049767;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=57966 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10602d83-decb-409f-a572-7300c6049767,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=10602d83-decb-409f-a572-7300c6049767,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2561 identity=57966 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=3b61700b34 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2561 identity=57966 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=3b61700b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=57966 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=3b61700b34 endpointID=2561 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-746j9 subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=10602d83-decb-409f-a572-7300c6049767 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=10602d83-decb-409f-a572-7300c6049767 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=3b61700b34 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2561 identity=57966 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-rabbit-init-746j9 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.29 266dffe5-9e26-4125-a523-5c7bb76d4de1 default   }" containerID=6fe574107602bdf5779e7d67c4507e0ca7e21767ae7bc684c4dc2b431a407a7a datapathConfiguration="&{false false false false false <nil>}" interface=lxce1f3b8c9b7ac k8sPodName=openstack/keystone-domain-manage-4b9zb labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=60578 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=191 identity=60578 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=6fe5741076 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=191 identity=60578 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=endpoint
level=info msg="Successful endpoint creation" containerID=6fe5741076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=60578 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.126 a9b40fd5-969d-49e2-bc64-064e977437e6 default   }" containerID=0a62f5b61cd0f921ef1edd79def47af16e13359a457da016f5f1b55aed3c9c34 datapathConfiguration="&{false false false false false <nil>}" interface=lxc7a0623854638 k8sPodName=openstack/keystone-api-77795df869-lwn6w labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0a62f5b61c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0a62f5b61c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=0a62f5b61c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=62427 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0a62f5b61c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=336 identity=62427 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=0a62f5b61c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=336 identity=62427 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0a62f5b61c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=336 identity=62427 ipv4=10.0.0.126 ipv6= k8sPodName=openstack/keystone-api-77795df869-lwn6w subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=6fe5741076 endpointID=191 k8sNamespace=openstack k8sPodName=keystone-domain-manage-4b9zb subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=dd17ce16-2ff7-428e-9cb3-4f24c24a5d15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=6fe5741076 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=191 identity=60578 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-domain-manage-4b9zb subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.121 59ca984d-bcc1-4f4e-94dd-5f067d1ca9d5 default   }" containerID=1dcd0d986c1235921d1ce0dca24cba3be07c0cfabf404def6cadde73a6bc942b datapathConfiguration="&{false false false false false <nil>}" interface=lxc233e2c3602d6 k8sPodName=openstack/keystone-bootstrap-wx6cg labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1dcd0d986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1dcd0d986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Identity of endpoint changed" containerID=1dcd0d986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=53955 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1dcd0d986c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=926 identity=53955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=1dcd0d986c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=926 identity=53955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1dcd0d986c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=926 identity=53955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=daemon
level=info msg="Delete endpoint request" containerID=1dcd0d986c endpointID=926 k8sNamespace=openstack k8sPodName=keystone-bootstrap-wx6cg subsys=daemon
level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=71421459-9755-4eb4-a4af-cbc2fe5645d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator
level=info msg="Removed endpoint" containerID=1dcd0d986c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=926 identity=53955 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/keystone-bootstrap-wx6cg subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.127 2e43aae3-aae7-455c-b874-46d4ff5b48cf default   }" containerID=2b69497ccf954223ecffeb4020353edf63ddaeb17b9609d4ff8013461507f100 datapathConfiguration="&{false false false false false <nil>}" interface=lxc21fcab4f0edf k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3272 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3272 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3272 identity=16749 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3272 identity=16749 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=2b69497ccf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3272 identity=16749 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=2b69497ccf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3272 identity=16749 ipv4=10.0.0.127 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-75qvd subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.187 4331e4b4-e0a7-4b12-9e8d-3a6e4ac8a274 default   }" containerID=c6af20e6d38a26dafbf9ec29936126b5f87e091c5bf4500fa1a8e3a44da245a6 datapathConfiguration="&{false false false false false <nil>}" interface=lxc8dab50248904 k8sPodName=openstack/horizon-556f466b58-fl6wc labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=c6af20e6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=c6af20e6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=c6af20e6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=1995 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=c6af20e6d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1377 identity=1995 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.77 68f9cf95-004e-46a1-8f92-727f70bcd79d default   }" containerID=d1355d4226595f0a012cd4320ea1e3f97df523dedf001ffc2daabe4989184d2a datapathConfiguration="&{false false false false false <nil>}" interface=lxc24a2ebc0ddb0 k8sPodName=openstack/horizon-db-init-cjkjq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=d1355d4226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=d1355d4226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=d1355d4226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=43732 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=d1355d4226 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=43732 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=c6af20e6d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1377 identity=1995 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc subsys=endpoint
level=info msg="Successful endpoint creation" containerID=c6af20e6d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1377 identity=1995 ipv4=10.0.0.187 ipv6= k8sPodName=openstack/horizon-556f466b58-fl6wc subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=d1355d4226 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2363 identity=43732 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=d1355d4226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=43732 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.176 b54fa4b3-fbb4-47c8-9004-9ea4cbb225fa default   }" containerID=e69089a99241fd595c978c38f664f2a614f827cf43b04213d7dccb0e940b10c0 datapathConfiguration="&{false false false false false <nil>}" interface=lxc94a70f8f7234 k8sPodName=openstack/horizon-556f466b58-ldgfz labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e69089a992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e69089a992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=e69089a992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=1995 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e69089a992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1475 identity=1995 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.185 8d6968bd-e66f-4195-a94b-dabbfbca418b default   }" containerID=0ac2c6a9eee7b26f9901f115a58ed7efc1320d6425bbdb41c1d228b505ee0124 datapathConfiguration="&{false false false false false <nil>}" interface=lxc51bb9b5c56f2 k8sPodName=openstack/horizon-556f466b58-svhhv labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=0ac2c6a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=0ac2c6a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=0ac2c6a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=1995 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=0ac2c6a9ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2858 identity=1995 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e69089a992 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1475 identity=1995 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e69089a992 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1475 identity=1995 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/horizon-556f466b58-ldgfz subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=0ac2c6a9ee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2858 identity=1995 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv subsys=endpoint
level=info msg="Successful endpoint creation" containerID=0ac2c6a9ee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2858 identity=1995 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/horizon-556f466b58-svhhv subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=d1355d4226 endpointID=2363 k8sNamespace=openstack k8sPodName=horizon-db-init-cjkjq subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=73ff2e20-9d9f-4a75-a4cd-7532241d5bc7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=d1355d4226 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=43732 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/horizon-db-init-cjkjq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.39 c4d8dff4-45e8-41c0-acac-081047d72a42 default   }" containerID=b85d16235d6c1ca8ae1ade3149fc07695988eaff8f7855d2eb27451fcea5e155 datapathConfiguration="&{false false false false false <nil>}" interface=lxce9eda3c9a5ea k8sPodName=openstack/horizon-db-sync-pwvvj labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b85d16235d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b85d16235d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b85d16235d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=10470 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b85d16235d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2292 identity=10470 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=b85d16235d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2292 identity=10470 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b85d16235d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=10470 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=b85d16235d endpointID=2292 k8sNamespace=openstack k8sPodName=horizon-db-sync-pwvvj subsys=daemon
level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=b93d9497-71c4-4ea5-8d22-2f0c6ab0d461 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator
level=info msg="Removed endpoint" containerID=b85d16235d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2292 identity=10470 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/horizon-db-sync-pwvvj subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.56 1e8b8278-b592-4d57-95e1-bfda8b6c648b default   }" containerID=cc97c3b45323d2aba07a9a60b17569cb1edef79d2ae5a36c474724ac5614811f datapathConfiguration="&{false false false false false <nil>}" interface=lxc9b034c8b3243 k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=cc97c3b453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=cc97c3b453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=cc97c3b453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=38454 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=cc97c3b453 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=38454 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=cc97c3b453 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1701 identity=38454 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=endpoint
level=info msg="Successful endpoint creation" containerID=cc97c3b453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=38454 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Delete endpoint request" containerID=cc97c3b453 endpointID=1701 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-lhhnq subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=53cfd8af-f04b-44b1-b47e-28210d126c2a k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=cc97c3b453 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1701 identity=38454 ipv4=10.0.0.56 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-lhhnq subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.221 70632293-0016-4adb-80f6-efcefa633afb default   }" containerID=f57590d36a92e18364b77a2a7ba39445b34db489f0d2fec1651d9c3d3e02e21b datapathConfiguration="&{false false false false false <nil>}" interface=lxc034e8f908446 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Invalid state transition skipped" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 line=611 subsys=endpoint
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=16665 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2323 identity=16665 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.85 6c328cee-c3f1-4a41-b923-3915e0c3b6ab default   }" containerID=731541dff5eeadde27da52928d5cb63db1ed06d51031f4f71d3df176b7a64f54 datapathConfiguration="&{false false false false false <nil>}" interface=lxcf79aac126395 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=731541dff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=731541dff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=731541dff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=7419 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=731541dff5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=723 identity=7419 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.57 1231d421-0f0a-4fcc-b592-b7972d08adc7 default   }" containerID=210159b02074f603fbb8d71c9fb5f497e4d746d82dc2432d243d029f19cd5905 datapathConfiguration="&{false false false false false <nil>}" interface=lxcd364014628f7 k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=210159b020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=210159b020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=210159b020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=9290 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=210159b020 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=9290 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=f57590d36a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2323 identity=16665 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=f57590d36a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2323 identity=16665 ipv4=10.0.0.221 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-nv5t7 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=731541dff5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=723 identity=7419 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=731541dff5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=723 identity=7419 ipv4=10.0.0.85 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-7lcb9 subsys=daemon
level=info msg="Rewrote endpoint BPF program" containerID=210159b020 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=734 identity=9290 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd subsys=endpoint
level=info msg="Successful endpoint creation" containerID=210159b020 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=734 identity=9290 ipv4=10.0.0.57 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-75886fb68b-zktwd subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.189 8fc20172-e70a-4aad-b224-9138517f9bef default   }" containerID=b1452344dc4890cca738d4e159459b97283124361592e7f783f1ccc06604944f datapathConfiguration="&{false false false false false <nil>}" interface=lxc37f2cf55c01a k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=b1452344dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=b1452344dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=b1452344dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=6496 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=b1452344dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2999 identity=6496 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=b1452344dc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2999 identity=6496 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=b1452344dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=6496 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Create endpoint request" addressing="&{10.0.0.16 2e4efc19-e6d0-4d06-a424-63f2e4359be4 default   }" containerID=c50f4f92e33c74c68489ff9c9c07825146301088397bcef2ec51e4c7875ee1b7 datapathConfiguration="&{false false false false false <nil>}" interface=lxcb48fdb3f61cd k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=c50f4f92e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=c50f4f92e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=endpoint
level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=c50f4f92e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=54708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=c50f4f92e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2412 identity=54708 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=endpoint
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=c50f4f92e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2412 identity=54708 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=endpoint
level=info msg="Successful endpoint creation" containerID=c50f4f92e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2412 identity=54708 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.69 9b22def5-053c-4775-9e4e-b29ea504428e default   }" containerID=e3768c7845406552cd02bc0b552cbcc6b90f5f28c07d9f02be03f96395b8f351 datapathConfiguration="&{false false false false false <nil>}" interface=lxc389d1ca2be67 k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=e3768c7845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=e3768c7845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=endpoint
level=info msg="Identity of endpoint changed" containerID=e3768c7845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=54708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=e3768c7845 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=54708 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=endpoint
level=info msg="Delete endpoint request" containerID=b1452344dc endpointID=2999 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-7pr86 subsys=daemon
level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=1423f697-49ed-478f-b83e-d90e348b41cf k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator
level=info msg="Removed endpoint" containerID=b1452344dc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2999 identity=6496 ipv4=10.0.0.189 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-7pr86 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=e3768c7845 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=604 identity=54708 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=e3768c7845 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=54708 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=daemon
level=info msg="Delete endpoint request" containerID=c50f4f92e3 endpointID=2412 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=daemon
level=info msg="Delete endpoint request" containerID=e3768c7845 endpointID=604 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=daemon
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator
level=info msg="Removed endpoint" containerID=c50f4f92e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2412 identity=54708 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9c415eda-c529-4413-87ec-dd0cc809676e subsys=endpoint
level=info msg="Removed endpoint" containerID=e3768c7845 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=604 identity=54708 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-68736b76-0e5b-433c-a258-900529bba769 subsys=endpoint
level=info msg="Create endpoint request" addressing="&{10.0.0.117 2141085c-f61e-4b85-a088-3fba80cbeae4 default   }" containerID=a38a764474ff21aea261daed9bf40f1343884ff4fcff1ea4675bfbf2ffa5fb2f datapathConfiguration="&{false false false false false <nil>}" interface=lxc53a40f4942ca k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=a38a764474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=a38a764474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=a38a764474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=793 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=a38a764474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=470 identity=793 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="Rewrote endpoint BPF program" containerID=a38a764474 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=470 identity=793 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=a38a764474 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=470 identity=793 ipv4=10.0.0.117 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon
level=info msg="Create endpoint request" addressing="&{10.0.0.183 618add03-6462-4aad-a90f-e5a8ecd01655 default   }" containerID=1d159b813180ee003f6c4ce5977cdaca3e526df3bf1be9d170dfa7f04826b327 datapathConfiguration="&{false false false false false <nil>}" interface=lxc7661840b0b0e k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true
level=info msg="New endpoint" containerID=1d159b8131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Resolving identity labels (blocking)" containerID=1d159b8131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator
level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator
level=info msg="Identity of endpoint changed" containerID=1d159b8131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=20824 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint
level=info msg="Waiting for endpoint to be generated" containerID=1d159b8131 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1183 identity=20824 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Rewrote endpoint BPF program" containerID=1d159b8131 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1183 identity=20824 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint
level=info msg="Successful endpoint creation" containerID=1d159b8131 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1183 identity=20824 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon
level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager
level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager