level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="759.227µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="39.351µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="722.846µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="9.85µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=95.268478ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.91µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.19µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="50.151µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="55.161µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="64.752µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="393.728µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.33µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.103668ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=16.045168ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="114.862µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="80.913µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration=4.425329ms function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="225.545µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="147.583µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=42.972331ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="76.731µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.68µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.24µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.168.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.044151ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.101658ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.85µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.016666ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="5.17µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.54µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="20.801µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="11.87µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="36.541µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="245.025µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.77µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.2µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="147.933µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="645.345µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="883.301µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="2.65µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="14.381µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.168 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.168 ipAddr.ipv6="" k8sNodeIP=199.19.213.168 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.168" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.90" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.168" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.168} {CiliumInternalIP 10.0.0.90}] 10.0.0.0/24 [] [] 10.0.0.63 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:37615" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.354278025s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="18.391µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="10.831µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="55.842µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="66.782µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=892 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.322919074s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.254471ms file-path=/var/run/cilium/state/templates/e3f621e92bc0200bcd91108dc456112c0db9ce457a57769df885739233e89b67/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2596 identity=4 identityLabels="reserved:health" ipv4=10.0.0.63 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.178553229s file-path=/var/run/cilium/state/templates/421103085e20b7f4396ab53a2d8991776f1e54264a31b23020699436058d0a5e/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2596 identity=4 ipv4=10.0.0.63 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.193 32078d62-98ae-4a4b-a2f1-80df800f1c9e default }" containerID=3ee6198e45037b73ab840b9c9c170e73ff3128628c80e385bb63e96538523a63 datapathConfiguration="&{false false false false false }" interface=lxc1d5446cb9df4 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.115 e2993fd1-ad16-4e58-a400-6f01736f869f default }" containerID=e188642e66000d85060de5fc8913cfa84cd6de098b6ab56ec20515344622415e datapathConfiguration="&{false false false false false }" interface=lxc4d1acc5e4b61 k8sPodName=kube-system/coredns-7c96b6546b-ss26n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=10713 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=742 identity=10713 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=39542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1200 identity=39542 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e188642e66 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1200 identity=39542 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=endpoint level=info msg="Successful endpoint creation" containerID=e188642e66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1200 identity=39542 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ee6198e45 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=742 identity=10713 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ee6198e45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=742 identity=10713 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3ee6198e45 endpointID=742 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-685tq subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=eb49bf89-822a-4118-9f99-385dd5236e8e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=3ee6198e45 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=742 identity=10713 ipv4=10.0.0.193 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-685tq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 14fb74ab-ed6c-4482-8cd5-391602293023 default }" containerID=6b5ec9f12cd698d436e84d45f76cd455b00a241063a5054fad007813f0627249 datapathConfiguration="&{false false false false false }" interface=lxc72fcbd6cc9a1 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=48432 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=48432 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b5ec9f12c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1347 identity=48432 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b5ec9f12c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1347 identity=48432 ipv4=10.0.0.141 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-9jdjj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00892 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00892 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00892 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00892:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.52 7a680b5c-20f2-4731-82eb-065fb284ab4f default }" containerID=bbe51fd2ffb15cb5863c57bcf0f6b72aff52c1db253834632f30e5666318b57f datapathConfiguration="&{false false false false false }" interface=lxcdad222241d99 k8sPodName=kube-system/coredns-67659f764b-2d766 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbe51fd2ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbe51fd2ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bbe51fd2ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=39542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbe51fd2ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1889 identity=39542 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.197 0bbc6d42-47e7-4a2d-8f03-16b5073da086 default }" containerID=1101359a168330bd236aea84b1c51c53441d5725b20375e02509523c7cbafcb2 datapathConfiguration="&{false false false false false }" interface=lxc33d8f5df6936 k8sPodName=kube-system/coredns-67659f764b-x7bcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1101359a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1101359a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1101359a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=39542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1101359a16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1008 identity=39542 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1101359a16 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1008 identity=39542 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1101359a16 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1008 identity=39542 ipv4=10.0.0.197 ipv6= k8sPodName=kube-system/coredns-67659f764b-x7bcq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=bbe51fd2ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1889 identity=39542 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbe51fd2ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1889 identity=39542 ipv4=10.0.0.52 ipv6= k8sPodName=kube-system/coredns-67659f764b-2d766 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 8702208b-29b2-4b6a-8d72-b2fa4921fac7 default }" containerID=76a544295369f891ded2a11bc413239eae538ba77a2e8f0aad44505164d6c989 datapathConfiguration="&{false false false false false }" interface=lxc3b9904c4b734 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76a5442953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76a5442953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=76a5442953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identity=19081 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76a5442953 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=542 identity=19081 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=76a5442953 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=542 identity=19081 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=76a5442953 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=542 identity=19081 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-jjwdj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e188642e66 endpointID=1200 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-ss26n subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=e188642e66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1200 identity=39542 ipv4=10.0.0.115 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ss26n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 7fe49fe1-b0dc-466c-93b4-7aaeff24b5ff default }" containerID=6ed4eaead80ba0db2279bb659b3f27017e84896eed7ab3b84a7364ccabcbcade datapathConfiguration="&{false false false false false }" interface=lxc45fd803dcc5a k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.205 07c86fbf-0f05-47b7-b7e7-eac7408cc071 default }" containerID=8067b8ddd9376e40f6a4026d65bf6cec418d23e32df1e302571a28f370ce85fa datapathConfiguration="&{false false false false false }" interface=lxc7291f2e927b9 k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6ed4eaead8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 d4b7fb80-28c7-4b92-af80-9ef03f8313e7 default }" containerID=5bca90ac9441f97a8a94156f63b3d77d675949c04d94d580bfa416481daf7157 datapathConfiguration="&{false false false false false }" interface=lxcb9856360d1fa k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn subsys=endpoint level=info msg="New endpoint" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2556 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6ed4eaead8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2556 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6ed4eaead8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=12623 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2556 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6ed4eaead8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2607 identity=12623 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2556 identity=33496 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2556 identity=33496 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=23626 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1486 identity=23626 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6ed4eaead8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2607 identity=12623 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6ed4eaead8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2607 identity=12623 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-jvspw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5bca90ac94 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2556 identity=33496 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws subsys=endpoint level=info msg="Successful endpoint creation" containerID=5bca90ac94 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2556 identity=33496 ipv4=10.0.0.226 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-2ggws subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=8067b8ddd9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1486 identity=23626 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8067b8ddd9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1486 identity=23626 ipv4=10.0.0.205 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-z26xn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.220 c4f7fe7f-6539-4d65-82d3-d7ec86e43d26 default }" containerID=45184d2fa62a742f7b06307a2c6020ee1d1a17c0e86fa2f63d4c093f806538c2 datapathConfiguration="&{false false false false false }" interface=lxc60cc688beebb k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45184d2fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45184d2fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45184d2fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=22723 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45184d2fa6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3687 identity=22723 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45184d2fa6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3687 identity=22723 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=45184d2fa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3687 identity=22723 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45184d2fa6 endpointID=3687 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-lsmx6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=99b27ce6-bfac-4c98-a14a-b41d94c6ef92 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=45184d2fa6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3687 identity=22723 ipv4=10.0.0.220 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-lsmx6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 85afdaeb-9d77-42ff-997f-2a49f3f32c9e default }" containerID=832b7f7062a3b48dec479157ae6cf5e2cccc68eeda821c41e7ef6f137eca7927 datapathConfiguration="&{false false false false false }" interface=lxc2077ed780810 k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=832b7f7062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=832b7f7062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=025f2ab7-9906-4174-b8b1-52248d236026,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=025f2ab7-9906-4174-b8b1-52248d236026,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=025f2ab7-9906-4174-b8b1-52248d236026;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=025f2ab7-9906-4174-b8b1-52248d236026;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=832b7f7062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=1117 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=025f2ab7-9906-4174-b8b1-52248d236026,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=025f2ab7-9906-4174-b8b1-52248d236026,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=832b7f7062 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2722 identity=1117 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=832b7f7062 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2722 identity=1117 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=endpoint level=info msg="Successful endpoint creation" containerID=832b7f7062 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2722 identity=1117 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=832b7f7062 endpointID=2722 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-zc7kf subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=025f2ab7-9906-4174-b8b1-52248d236026 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=025f2ab7-9906-4174-b8b1-52248d236026 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=832b7f7062 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2722 identity=1117 ipv4=10.0.0.27 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-zc7kf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 aa89572b-4dc1-4f34-adff-091eff3fc11d default }" containerID=488b7cae156f51906efa2f3c19f5e913e7dd76fcc7885870537fbbad2507886c datapathConfiguration="&{false false false false false }" interface=lxcc4ae652377df k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=44852 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=396 identity=44852 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=488b7cae15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=396 identity=44852 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 subsys=endpoint level=info msg="Successful endpoint creation" containerID=488b7cae15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=396 identity=44852 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-vj245 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.248 1731175f-c15b-44c1-bf8b-3047f0ca195a default }" containerID=2443316ac8816208fd40fb81882e6fbf82e31a64a1ef8df3ecbde498748c0cfd datapathConfiguration="&{false false false false false }" interface=lxc7f0384571c40 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2443316ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2443316ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2443316ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=57457 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2443316ac8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=715 identity=57457 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2443316ac8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=715 identity=57457 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2443316ac8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=57457 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2443316ac8 endpointID=715 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-6xdb8 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=edd12a16-06f3-4149-b6fa-22e286cbea2f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=2443316ac8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=715 identity=57457 ipv4=10.0.0.248 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-6xdb8 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=f53d010a-4f86-4a13-a5ef-ebb7828c70ce] Description:}]" policyAddRequest=e0fbffec-0eeb-46b6-9f7e-717b9a7b2399 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=e0fbffec-0eeb-46b6-9f7e-717b9a7b2399 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=46ac6b7d-b70a-47b0-87cc-ce5d9ff01b27] Description:}]" policyAddRequest=4a162339-bd3d-40e5-a070-955ea758cb57 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4a162339-bd3d-40e5-a070-955ea758cb57 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.73 978286e1-6552-4484-9593-c997522afb4a default }" containerID=9a4bd8626f7089d3ceddd588f22972c4aa1998a42d5e0903c43d8a34ba779cfa datapathConfiguration="&{false false false false false }" interface=lxcba92b34b29e8 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a4bd8626f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a4bd8626f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a4bd8626f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=7811 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a4bd8626f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1209 identity=7811 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9a4bd8626f datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1209 identity=7811 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a4bd8626f datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1209 identity=7811 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-75h84 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.170 b3f8c352-a821-4c1e-b29b-4e6c1e607122 default }" containerID=27a7edeaba96a1f4ed0449e93e1acb81c7893865c66956de8d48c1bd273d15d0 datapathConfiguration="&{false false false false false }" interface=lxc3622d08a0727 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=27a7edeaba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=27a7edeaba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=27a7edeaba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=35860 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=27a7edeaba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=642 identity=35860 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=27a7edeaba datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=642 identity=35860 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx subsys=endpoint level=info msg="Successful endpoint creation" containerID=27a7edeaba datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=642 identity=35860 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-vqdcx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 fb654a3a-e441-4d47-989a-c414ec64626e default }" containerID=4dd9b0d3b294886760ddad06e91d786ad520ce22124af4415b1f9943cae7ab56 datapathConfiguration="&{false false false false false }" interface=lxcf687652e395a k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dd9b0d3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dd9b0d3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=4dd9b0d3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=25112 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dd9b0d3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1523 identity=25112 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4dd9b0d3b2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1523 identity=25112 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dd9b0d3b2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1523 identity=25112 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-p5jt7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.225 429c2335-442a-477b-a642-5d3b013d1709 default }" containerID=9e3b1aa5d1d0796aadca8e21c01632be6041cced4087f950e46e757f1aea8a0c datapathConfiguration="&{false false false false false }" interface=lxce0ed27f6d686 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=37230 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=37230 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e3b1aa5d1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1256 identity=37230 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e3b1aa5d1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1256 identity=37230 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.10 6937f1d3-bc00-46fe-b500-2e60cc1cd4e4 default }" containerID=7f767488f9a6f490260270eb09a8248b4d8aed5c035542dc5fc836421d091f01 datapathConfiguration="&{false false false false false }" interface=lxc6503b80d514b k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f767488f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f767488f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f767488f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f767488f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=1253 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f767488f9 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1650 identity=1253 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f767488f9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1650 identity=1253 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f767488f9 endpointID=1650 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7f767488f9 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1650 identity=1253 ipv4=10.0.0.10 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-2f3edfa8-c427-4825-b07b-35f2858d0ef1 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 6b13a6ef-c623-4405-a5ba-f0735fcb3ab7 default }" containerID=2c47d7c565e2cdac69175c0811f860b067a7fd4ef8ff74adaccc76955534b986 datapathConfiguration="&{false false false false false }" interface=lxc5a914564413c k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c47d7c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c47d7c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c47d7c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=5080 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2c47d7c565 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1459 identity=5080 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c47d7c565 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1459 identity=5080 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c47d7c565 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1459 identity=5080 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=af3b4dc9-66eb-4339-8a9f-ab398ea1763c] Description:}]" policyAddRequest=76894db9-e91c-4ebc-ae5b-0e7ce2bb8917 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=76894db9-e91c-4ebc-ae5b-0e7ce2bb8917 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.25 f30f1e69-9271-4fb7-b201-fb8ac2123c4c default }" containerID=0d1bf47a644c82b2c3c590401cf787195d28756c5469e235ae290177634e9d39 datapathConfiguration="&{false false false false false }" interface=lxcc49e6eba8714 k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d1bf47a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d1bf47a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d1bf47a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d1bf47a64 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=1253 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d1bf47a64 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=48 identity=1253 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d1bf47a64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=48 identity=1253 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=daemon level=info msg="Delete endpoint request" containerID=0d1bf47a64 endpointID=48 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0d1bf47a64 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=48 identity=1253 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-19f28622-333f-4680-a414-7ef78aca86e3 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 16ba9840-cf6e-4d95-8a0a-94d7414a0d14 default }" containerID=a2bb42271cbb1d466430601fa8ed40d6aa8b25fb71c64ce2fd935cb8718dd9e3 datapathConfiguration="&{false false false false false }" interface=lxcebb097745506 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2bb42271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2bb42271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2bb42271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=45532 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2bb42271c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1973 identity=45532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a2bb42271c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1973 identity=45532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2bb42271c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1973 identity=45532 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ed28b19d-794e-4b5d-be45-93b32dac9af9] Description:}]" policyAddRequest=0f2bbcaf-4603-4fc3-a2b7-40f322a71aae subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=0f2bbcaf-4603-4fc3-a2b7-40f322a71aae policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.54 f382f3e6-f10a-4fef-a064-e8e8554b0d26 default }" containerID=90b91d0389f745e5576f78f65717311441085837df5acdb84e0663653b1f666c datapathConfiguration="&{false false false false false }" interface=lxcb48c1d6fa68f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90b91d0389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90b91d0389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90b91d0389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=52510 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90b91d0389 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=506 identity=52510 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90b91d0389 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=506 identity=52510 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90b91d0389 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=506 identity=52510 ipv4=10.0.0.54 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009316623155274798 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.142 22554c5d-2be8-4d85-acd6-ecd4f2a74db0 default }" containerID=a6a7db1cfab9bdc8f870d7d0132d6eee9c0c9065e496286caa8346414658364b datapathConfiguration="&{false false false false false }" interface=lxc1acab4dc07b0 k8sPodName=monitoring/node-feature-discovery-worker-kb2tm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a6a7db1cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a6a7db1cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a6a7db1cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=62826 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a6a7db1cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3690 identity=62826 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 efbb3843-00bc-42e0-92db-411e79bf16ba default }" containerID=746d16b4cb34ce21364e11abac46a4ec5ab3094ea11281efc4ad5879ebc2ac1e datapathConfiguration="&{false false false false false }" interface=lxc31eefbc0886e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=746d16b4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=746d16b4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=746d16b4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=7937 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=746d16b4cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=7937 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.48 e4a2934c-082c-40d9-b456-8db6f42289c0 default }" containerID=438dffd4e6908733f844c42dd4f1c7a811e73abfe7fdec6f967ba75440d9d1ad datapathConfiguration="&{false false false false false }" interface=lxc720fad2a128e k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=438dffd4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=438dffd4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=438dffd4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=41572 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=438dffd4e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1240 identity=41572 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a6a7db1cfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3690 identity=62826 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm subsys=endpoint level=info msg="Successful endpoint creation" containerID=a6a7db1cfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3690 identity=62826 ipv4=10.0.0.142 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-kb2tm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=746d16b4cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=716 identity=7937 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=746d16b4cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=716 identity=7937 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-k6lhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=438dffd4e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1240 identity=41572 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=438dffd4e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1240 identity=41572 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-mnfp5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.191 d5d39d1c-a908-4908-83a0-235854dd5216 default }" containerID=25dfaa8e397c37495eb8192cf38f7a467539bea2fe8846c9a4c3039dc0e17b5a datapathConfiguration="&{false false false false false }" interface=lxc6d4980e450dc k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=25dfaa8e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=25dfaa8e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=25dfaa8e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=19967 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=25dfaa8e39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1890 identity=19967 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=25dfaa8e39 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1890 identity=19967 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht subsys=endpoint level=info msg="Successful endpoint creation" containerID=25dfaa8e39 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1890 identity=19967 ipv4=10.0.0.191 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-tzpht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=892 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00892 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00892 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00892 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00892:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=892 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 24c9b48f-c257-4feb-adf5-2472971b1036 default }" containerID=b9253977b844c21d606db2300b5416eb63508c46f16d2351b1cb634c143977e9 datapathConfiguration="&{false false false false false }" interface=lxc72a67d2c2dd3 k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9253977b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9253977b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9253977b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=12650 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9253977b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2173 identity=12650 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b9253977b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2173 identity=12650 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9253977b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2173 identity=12650 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9253977b8 endpointID=2173 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-cdhlw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=5506d6eb-b6c6-4920-9d63-7a46fe1e3ba4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=b9253977b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2173 identity=12650 ipv4=10.0.0.37 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-cdhlw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 45895df1-66fb-440c-9fe1-faf3b704800a default }" containerID=fd542a0b879694bf59a78c4dfbc334bbf22d5f6b357e216d0a573ea60b974d7c datapathConfiguration="&{false false false false false }" interface=lxc5560dc39440c k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.42 3bb1d653-f08f-4484-9767-1c9e52ca9fa6 default }" containerID=e8b56df2c248d5ae464bf7af3430998ef4cf366acb086c07cf0d3237d9ebb408 datapathConfiguration="&{false false false false false }" interface=lxc5faab7de7356 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.151 c3d3cb4d-a4ab-4509-b0c5-c6f2f0bdcf21 default }" containerID=c4cb7337a7b8a125560e6f28bdc61ec3c607872aba6044cd3c62451f611e212e datapathConfiguration="&{false false false false false }" interface=lxcf64705d6e2a7 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd542a0b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n subsys=endpoint level=info msg="New endpoint" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd542a0b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1783 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1783 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd542a0b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=8223 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1783 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd542a0b87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3979 identity=8223 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=21464 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=584 identity=21464 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1783 identity=52421 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1783 identity=52421 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8b56df2c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=584 identity=21464 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8b56df2c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=584 identity=21464 ipv4=10.0.0.42 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-bzb4g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fd542a0b87 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3979 identity=8223 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd542a0b87 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3979 identity=8223 ipv4=10.0.0.5 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-76c87b4b4b-c8p9n subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c4cb7337a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1783 identity=52421 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c4cb7337a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1783 identity=52421 ipv4=10.0.0.151 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-vl8bm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.92 d1a35732-98c0-4dd6-876b-2ef32d91a5cc default }" containerID=0ff337e274c8260aaab66563cf78c70b5745ce9a1c8b93587e3d651c0960b26a datapathConfiguration="&{false false false false false }" interface=lxcb7e4c3f1441d k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ff337e274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ff337e274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ff337e274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=24104 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ff337e274 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1801 identity=24104 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ff337e274 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1801 identity=24104 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ff337e274 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=24104 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 49fc7380-afab-4ecc-9798-9ccc34ad6e76 default }" containerID=ac63bd37a9997ab695635c082b84d9d9163cd9b0e5b253cf0054de4b36362179 datapathConfiguration="&{false false false false false }" interface=lxc0b319726085d k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac63bd37a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac63bd37a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac63bd37a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac63bd37a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2023 identity=1253 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac63bd37a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2023 identity=1253 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac63bd37a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2023 identity=1253 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 5700c196-a2f0-4915-bd27-825ff09f7eb5 default }" containerID=5ba361d76b4e9bce97f93dcc8519b427b903ecdd94eb0403ebe2fcff8d93036c datapathConfiguration="&{false false false false false }" interface=lxcd20aee345339 k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ba361d76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ba361d76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=5ba361d76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ba361d76b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2737 identity=1253 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ba361d76b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2737 identity=1253 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ba361d76b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=1253 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=daemon level=info msg="Delete endpoint request" containerID=0ff337e274 endpointID=1801 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-8nwm5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dd152cc4-1893-4843-8e1a-210a296cfef2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0ff337e274 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1801 identity=24104 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nwm5 subsys=endpoint level=info msg="Delete endpoint request" containerID=ac63bd37a9 endpointID=2023 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ac63bd37a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2023 identity=1253 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-299d0e7b-d9b7-40d1-86a9-dc3495664db2 subsys=endpoint level=info msg="Delete endpoint request" containerID=5ba361d76b endpointID=2737 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5ba361d76b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2737 identity=1253 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a91d0ca5-8bbf-453f-a1f5-0ace63b2d99e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 194b03bf-f3d2-484c-b030-cdb89b280db4 default }" containerID=47fd6fa097429f5f24f692ed8e9f7d29c6354545048e957b850929d478261ca6 datapathConfiguration="&{false false false false false }" interface=lxcb6bab5d03bcd k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47fd6fa097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47fd6fa097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47fd6fa097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=29844 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47fd6fa097 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=29844 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47fd6fa097 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1185 identity=29844 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=47fd6fa097 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1185 identity=29844 ipv4=10.0.0.239 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 2c986ef8-a4a3-4798-be9b-6fccb5384f27 default }" containerID=c48280c4c7e0f9f423f90c6f6e1ecf60224bbd63d8264fce9b3b6d2651891e8e datapathConfiguration="&{false false false false false }" interface=lxcec6b82ababb8 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=41988 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=472 identity=41988 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c48280c4c7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=472 identity=41988 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c48280c4c7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=472 identity=41988 ipv4=10.0.0.96 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.168 d1f14179-8b77-4947-9f50-1ca9d8311a0c default }" containerID=68c155db1680b480212c2d038f09163a05cd78e99ede6ccda1c2febd3e781d0f datapathConfiguration="&{false false false false false }" interface=lxc3915b3932225 k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.201 6e677d0a-1820-4833-b581-d3854cedf6bf default }" containerID=36a678075d96ce065a3dc48b46ffff8dc706801bd43e5ffb06f5a7e0102f6944 datapathConfiguration="&{false false false false false }" interface=lxcd1fbb9b25889 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd subsys=endpoint level=info msg="New endpoint" containerID=36a678075d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36a678075d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.97 b541ad88-88ca-4c0a-aaf0-31afeead1faa default }" containerID=ca287cb248fd8c74215ef0e2336a98e808243732912c02b2c0d2fb829a7e367e datapathConfiguration="&{false false false false false }" interface=lxcc5ba2eeb5804 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=36a678075d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=56498 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36a678075d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=129 identity=56498 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=6869 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2144 identity=6869 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=43974 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1085 identity=43974 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 ca063fac-8434-4b78-a841-e5bfb2acf952 default }" containerID=223f26e740d4458fd222e4b4c891be557999b2fb3fee646ff51ea50be2f2d680 datapathConfiguration="&{false false false false false }" interface=lxcb28dc78d4414 k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=223f26e740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=223f26e740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=223f26e740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=223f26e740 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=944 identity=1253 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36a678075d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=129 identity=56498 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36a678075d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=129 identity=56498 ipv4=10.0.0.201 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=68c155db16 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2144 identity=6869 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd subsys=endpoint level=info msg="Successful endpoint creation" containerID=68c155db16 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2144 identity=6869 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-khvgd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ca287cb248 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1085 identity=43974 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ca287cb248 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1085 identity=43974 ipv4=10.0.0.97 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=223f26e740 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=944 identity=1253 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=endpoint level=info msg="Successful endpoint creation" containerID=223f26e740 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=1253 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 738c0085-40e0-49a0-b582-2baaf0b6743a default }" containerID=64eb2355b2e3951b46d39ebda54aef15ee9787bc1a9e8660441420ba289aa747 datapathConfiguration="&{false false false false false }" interface=lxc024bdd04f4bf k8sPodName=monitoring/vector-4k2hq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64eb2355b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64eb2355b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64eb2355b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=55484 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=64eb2355b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2226 identity=55484 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64eb2355b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2226 identity=55484 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq subsys=endpoint level=info msg="Successful endpoint creation" containerID=64eb2355b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2226 identity=55484 ipv4=10.0.0.19 ipv6= k8sPodName=monitoring/vector-4k2hq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=223f26e740 endpointID=944 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=223f26e740 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=944 identity=1253 ipv4=10.0.0.218 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a14d7add-d850-487d-8512-b7c166165526 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.234 e62e24f5-ca38-4d11-b3c6-00a149f33188 default }" containerID=bc8a11691cc3d7ef6493cbb6d8509992b234895d0dece11463f540b4552bfa63 datapathConfiguration="&{false false false false false }" interface=lxc80c3e3680eb0 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc8a11691c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc8a11691c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc8a11691c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=1608 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc8a11691c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2118 identity=1608 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc8a11691c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2118 identity=1608 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc8a11691c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2118 identity=1608 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.164 cee23c6b-16ba-4c70-97e8-b513a8246fe7 default }" containerID=93fa1ec49ce57a2ef5bd161f683c6d8ad09893df1dbfddee577e063aec24d1da datapathConfiguration="&{false false false false false }" interface=lxc6b9433ae4d1b k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93fa1ec49c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93fa1ec49c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93fa1ec49c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=19308 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93fa1ec49c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1443 identity=19308 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=93fa1ec49c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1443 identity=19308 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk subsys=endpoint level=info msg="Successful endpoint creation" containerID=93fa1ec49c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1443 identity=19308 ipv4=10.0.0.164 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-hs7mk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.20 f8cdd615-49ab-49c0-bb29-b83e3089a49a default }" containerID=9841c35ffbf97b27b5840086b11b49f789d18bbaf869d2fd7ab5e0d8fec36422 datapathConfiguration="&{false false false false false }" interface=lxcd591cda48e12 k8sPodName=openstack/memcached-memcached-6479589586-hg5dq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9841c35ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9841c35ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9841c35ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=55116 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9841c35ffb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=55116 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9841c35ffb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2182 identity=55116 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9841c35ffb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2182 identity=55116 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-hg5dq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.99 01b2e8b4-7f98-4a24-881e-7ede56d5a518 default }" containerID=34fce64e941625b89b6a1197ec2cfca604ad9dd2410751dacb3acf83d2e22bbe datapathConfiguration="&{false false false false false }" interface=lxc1b6516fe8571 k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34fce64e94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34fce64e94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34fce64e94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34fce64e94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=872 identity=1253 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34fce64e94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=872 identity=1253 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=endpoint level=info msg="Successful endpoint creation" containerID=34fce64e94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=1253 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=daemon level=info msg="Delete endpoint request" containerID=34fce64e94 endpointID=872 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=34fce64e94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=872 identity=1253 ipv4=10.0.0.99 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-39a8413e-405f-483d-85dd-4386ac1197de subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 7f37a6c2-267a-4753-80ad-92e581bfa26e default }" containerID=1f3772a214c02e918b388ae0bd167c774654243daf03c8dda5c93309500dae2e datapathConfiguration="&{false false false false false }" interface=lxce95bd700302f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f3772a214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f3772a214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1f3772a214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=3991 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f3772a214 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=146 identity=3991 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f3772a214 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=146 identity=3991 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f3772a214 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=146 identity=3991 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.188 0ff21fa3-0759-40fd-a6b2-b9259dddb50b default }" containerID=f5bca45966f1575cff8fbb2451b6eab7c0d5cd9a9d2d9d69dd5254c98e67364e datapathConfiguration="&{false false false false false }" interface=lxc0b5c6a4a9a70 k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5bca45966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2481 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5bca45966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2481 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5bca45966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2481 identity=23951 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f5bca45966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2481 identity=23951 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 a4e28ad8-6bfc-461f-bbba-7fcc2f177903 default }" containerID=17ca64a71a1864657656649651ea5d5e4dcd146785505ffef10458294c59eb80 datapathConfiguration="&{false false false false false }" interface=lxce95a33ee6fec k8sPodName=openstack/keystone-credential-setup-jf4tk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17ca64a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17ca64a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17ca64a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=36717 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17ca64a71a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=490 identity=36717 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5bca45966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2481 identity=23951 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5bca45966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2481 identity=23951 ipv4=10.0.0.188 ipv6= k8sPodName=openstack/keystone-api-7d5fd8599d-f26dx subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=17ca64a71a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=490 identity=36717 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=endpoint level=info msg="Successful endpoint creation" containerID=17ca64a71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=36717 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=17ca64a71a endpointID=490 k8sNamespace=openstack k8sPodName=keystone-credential-setup-jf4tk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=b16c6184-afc7-43d4-8eec-2c6860569b5b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=17ca64a71a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=490 identity=36717 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/keystone-credential-setup-jf4tk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 60e3f353-7d44-45c9-9acb-874e41b427e0 default }" containerID=7d6ee1402623df25303b71a15d862e45a58bc6fec9bd1e7b409b09db1a84f4ae datapathConfiguration="&{false false false false false }" interface=lxcfba92090a2c3 k8sPodName=openstack/keystone-db-init-2tvgq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d6ee14026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d6ee14026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=17434327-184c-4fcc-bc03-3fd060aee955,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=17434327-184c-4fcc-bc03-3fd060aee955,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=17434327-184c-4fcc-bc03-3fd060aee955;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=17434327-184c-4fcc-bc03-3fd060aee955;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d6ee14026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=63789 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=17434327-184c-4fcc-bc03-3fd060aee955,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=17434327-184c-4fcc-bc03-3fd060aee955,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d6ee14026 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=63789 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7d6ee14026 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=279 identity=63789 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d6ee14026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=63789 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7d6ee14026 endpointID=279 k8sNamespace=openstack k8sPodName=keystone-db-init-2tvgq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=17434327-184c-4fcc-bc03-3fd060aee955 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=17434327-184c-4fcc-bc03-3fd060aee955 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7d6ee14026 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=279 identity=63789 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/keystone-db-init-2tvgq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.206 1e9ff398-3a6e-40aa-8388-f5414c338221 default }" containerID=41a97cf91936aaa7d36955ac784c1acbea8cb915348c34ae4e0dcff535314b15 datapathConfiguration="&{false false false false false }" interface=lxcc7342d160fc7 k8sPodName=openstack/keystone-fernet-setup-7vz58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=26714 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=26714 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41a97cf919 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=26714 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=41a97cf919 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=26714 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41a97cf919 endpointID=29 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-7vz58 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=9b0e20f1-44fe-4067-a6a5-042b6be30feb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=41a97cf919 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=26714 ipv4=10.0.0.206 ipv6= k8sPodName=openstack/keystone-fernet-setup-7vz58 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 a7260f19-43f2-4d08-bef4-4501257c7d6f default }" containerID=47267553139e0c700c461884aaf83d0b8e20b64b86470402b22c46a2168b9013 datapathConfiguration="&{false false false false false }" interface=lxcf75be0355598 k8sPodName=openstack/keystone-db-sync-ppxtx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4726755313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4726755313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69983610-895b-4c23-ba0f-3ad639d67976,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=69983610-895b-4c23-ba0f-3ad639d67976,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=69983610-895b-4c23-ba0f-3ad639d67976;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=69983610-895b-4c23-ba0f-3ad639d67976;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4726755313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identity=44691 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=69983610-895b-4c23-ba0f-3ad639d67976,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=69983610-895b-4c23-ba0f-3ad639d67976,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4726755313 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1943 identity=44691 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4726755313 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1943 identity=44691 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=endpoint level=info msg="Successful endpoint creation" containerID=4726755313 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1943 identity=44691 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4726755313 endpointID=1943 k8sNamespace=openstack k8sPodName=keystone-db-sync-ppxtx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=69983610-895b-4c23-ba0f-3ad639d67976 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=69983610-895b-4c23-ba0f-3ad639d67976 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=4726755313 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1943 identity=44691 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/keystone-db-sync-ppxtx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 65fd5aeb-385c-418e-830a-564b36329272 default }" containerID=3c1ce4c8b82269ce2480fa2670c34784667877d991fda0c5ce8619e628b9d00e datapathConfiguration="&{false false false false false }" interface=lxcdf696050bb74 k8sPodName=openstack/keystone-rabbit-init-swmtf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c1ce4c8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c1ce4c8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c1ce4c8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=32906 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c1ce4c8b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3493 identity=32906 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3c1ce4c8b8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3493 identity=32906 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c1ce4c8b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=32906 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c1ce4c8b8 endpointID=3493 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-swmtf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c784154f-67e5-4574-8da3-dec189e69e7a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c1ce4c8b8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3493 identity=32906 ipv4=10.0.0.153 ipv6= k8sPodName=openstack/keystone-rabbit-init-swmtf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 44e17b34-5f48-49bc-a155-ed064f9df189 default }" containerID=d5e0e4c72186f1496f2dd5196cc1a53f30612f27512ea7b1130dbf6c1970bfa6 datapathConfiguration="&{false false false false false }" interface=lxc2d56c0f1d96a k8sPodName=openstack/keystone-domain-manage-jzl5d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5e0e4c721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5e0e4c721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5e0e4c721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=63008 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d5e0e4c721 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2022 identity=63008 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5e0e4c721 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2022 identity=63008 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5e0e4c721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2022 identity=63008 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d5e0e4c721 endpointID=2022 k8sNamespace=openstack k8sPodName=keystone-domain-manage-jzl5d subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=d2e3424f-0307-4aff-8a8d-cc86c1daaf00 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d5e0e4c721 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2022 identity=63008 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/keystone-domain-manage-jzl5d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 41996d7c-b694-4a08-8fe5-825e78dd8b5d default }" containerID=0da5b05cd8fd0803aee5a48e47f892ffefc0ed5172a53a33fc63bd5c1d6ed031 datapathConfiguration="&{false false false false false }" interface=lxc2727fb89c72f k8sPodName=openstack/keystone-bootstrap-rmq4k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0da5b05cd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0da5b05cd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0da5b05cd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=33835 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0da5b05cd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2294 identity=33835 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0da5b05cd8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2294 identity=33835 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=endpoint level=info msg="Successful endpoint creation" containerID=0da5b05cd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2294 identity=33835 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0da5b05cd8 endpointID=2294 k8sNamespace=openstack k8sPodName=keystone-bootstrap-rmq4k subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4d01951b-13dc-44d2-a927-3c3a563acef4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0da5b05cd8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2294 identity=33835 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/keystone-bootstrap-rmq4k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 c6a318c7-6527-4d05-a6ff-50aababe3765 default }" containerID=9bf9d6a0352c1922df6a3c57d158522c7ffffee5d1efd7622fbcee22e0bac25a datapathConfiguration="&{false false false false false }" interface=lxc3de023b66809 k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bf9d6a035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bf9d6a035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bf9d6a035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bf9d6a035 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=764 identity=1253 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bf9d6a035 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=764 identity=1253 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bf9d6a035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=764 identity=1253 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=daemon level=info msg="Delete endpoint request" containerID=9bf9d6a035 endpointID=764 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9bf9d6a035 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=764 identity=1253 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3b4a1a32-5eb7-4e31-a557-427fc12e0b55 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 54ed6b4a-a49a-4e98-8b9a-9606b9496a7d default }" containerID=a87ef93bcba2145450f23d77d63d4aff48e645831fb25f292d5c6f54fb64a757 datapathConfiguration="&{false false false false false }" interface=lxcb69a30b3b33a k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=41061 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=383 identity=41061 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a87ef93bcb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=383 identity=41061 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a87ef93bcb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=383 identity=41061 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.65 31e5ac81-0b73-489f-83e2-83a4cbbf75ae default }" containerID=a7cae7ecf4bb13ebfbb31917bfd37ef97e23183a8900925656cbf326f2912ed0 datapathConfiguration="&{false false false false false }" interface=lxcd13c3cb42d57 k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7cae7ecf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7cae7ecf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7cae7ecf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=1258 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7cae7ecf4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1427 identity=1258 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 6bb1bbde-1896-46ce-aad4-fe7f0c5caedc default }" containerID=273d58dc19e313d054c4bbb930451b237f81a1bfaa49953bd56b0fcfc4b4ae6e datapathConfiguration="&{false false false false false }" interface=lxc7eed81b6dbc2 k8sPodName=openstack/barbican-db-init-qqk5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=273d58dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=273d58dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=273d58dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=11897 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=273d58dc19 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=862 identity=11897 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7cae7ecf4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1427 identity=1258 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7cae7ecf4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1427 identity=1258 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/barbican-api-6d65bf5684-tnbf8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=273d58dc19 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=862 identity=11897 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=273d58dc19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=11897 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=273d58dc19 endpointID=862 k8sNamespace=openstack k8sPodName=barbican-db-init-qqk5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=e4c1b563-615a-4bce-bb9b-753d77522650 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=273d58dc19 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=862 identity=11897 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/barbican-db-init-qqk5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 72259f90-e93f-4a4a-8f3d-5714a551e9a0 default }" containerID=dabd6d4ad9dc5c1fbf1b386c340d2434313e1e794d549b9116e14044277b53f8 datapathConfiguration="&{false false false false false }" interface=lxc3f681fd9709f k8sPodName=openstack/barbican-db-sync-22hbb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dabd6d4ad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dabd6d4ad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=dabd6d4ad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=1517 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dabd6d4ad9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=1517 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dabd6d4ad9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=1517 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=endpoint level=info msg="Successful endpoint creation" containerID=dabd6d4ad9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=1517 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dabd6d4ad9 endpointID=292 k8sNamespace=openstack k8sPodName=barbican-db-sync-22hbb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=9ad24929-f6e8-40fe-b0ad-939c1f06be9c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=dabd6d4ad9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=1517 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/barbican-db-sync-22hbb subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03627565030367795 newInterval=11m15s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.98 4f0ba8d5-3f02-4837-82fc-d278cab3066e default }" containerID=8b3a636611b3a4824b4ebb66e87d0d177bcca284b885dd922351efd9e138e02e datapathConfiguration="&{false false false false false }" interface=lxcd48e6de38130 k8sPodName=openstack/barbican-rabbit-init-gr4x8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44665da3-645d-4c20-95eb-554386915df4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=44665da3-645d-4c20-95eb-554386915df4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=44665da3-645d-4c20-95eb-554386915df4;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=44665da3-645d-4c20-95eb-554386915df4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=51020 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=44665da3-645d-4c20-95eb-554386915df4,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=44665da3-645d-4c20-95eb-554386915df4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3980 identity=51020 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8b3a636611 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3980 identity=51020 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b3a636611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=51020 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8b3a636611 endpointID=3980 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-gr4x8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=44665da3-645d-4c20-95eb-554386915df4 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=44665da3-645d-4c20-95eb-554386915df4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8b3a636611 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3980 identity=51020 ipv4=10.0.0.98 ipv6= k8sPodName=openstack/barbican-rabbit-init-gr4x8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 0e437a6c-c316-44f1-9715-a95d2202bf65 default }" containerID=e7f5a9133ccd2c4fda5158b794f14fa2523c1c8795b2ef07ff183c4640f5841d datapathConfiguration="&{false false false false false }" interface=lxcd058f28bec01 k8sPodName=openstack/barbican-ks-service-gjgqr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7f5a9133c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7f5a9133c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7f5a9133c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=11327 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e7f5a9133c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=579 identity=11327 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7f5a9133c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=579 identity=11327 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7f5a9133c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=11327 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=daemon level=info msg="Delete endpoint request" containerID=e7f5a9133c endpointID=579 k8sNamespace=openstack k8sPodName=barbican-ks-service-gjgqr subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=bf9b01fa-8865-44d5-a82a-51b49f71556d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e7f5a9133c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=579 identity=11327 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/barbican-ks-service-gjgqr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 48d40c48-badc-4ad9-9c33-2c42b30fd79d default }" containerID=8182ff0feaa25b7f3ac70b577148cce06031a8c6640abe68fb796591aedeba93 datapathConfiguration="&{false false false false false }" interface=lxc90d788c47f8c k8sPodName=openstack/barbican-ks-endpoints-qqhsh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=3403 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=726 identity=3403 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8182ff0fea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=726 identity=3403 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=endpoint level=info msg="Successful endpoint creation" containerID=8182ff0fea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=726 identity=3403 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8182ff0fea endpointID=726 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-qqhsh subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=5f4d8643-f7e4-486c-82bb-bd21b71953a6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=8182ff0fea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=726 identity=3403 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/barbican-ks-endpoints-qqhsh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 23cb4fa6-4508-4f90-b109-36db5e0f8517 default }" containerID=7b294f27bff98e649913a8fc9d2bdcf9a6a922cbe57905536a2ef59ce5c4510c datapathConfiguration="&{false false false false false }" interface=lxc55c8bebc6b85 k8sPodName=openstack/barbican-ks-user-mppmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=22794 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2396 identity=22794 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7b294f27bf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2396 identity=22794 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7b294f27bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2396 identity=22794 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7b294f27bf endpointID=2396 k8sNamespace=openstack k8sPodName=barbican-ks-user-mppmj subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=3eacd8c7-6f53-4e5c-9fc0-85abec63a302 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7b294f27bf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2396 identity=22794 ipv4=10.0.0.3 ipv6= k8sPodName=openstack/barbican-ks-user-mppmj subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.43 d7f3fbfd-1058-4f9c-80c8-b130aeabbe7d default }" containerID=8b34d48c7578ca22bb7454f1c1d53d845840bbbd6689cb80656340f2e1b02514 datapathConfiguration="&{false false false false false }" interface=lxc456cda3a6746 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8b34d48c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8b34d48c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8b34d48c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=40239 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8b34d48c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2046 identity=40239 ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8b34d48c75 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2046 identity=40239 ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=8b34d48c75 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2046 identity=40239 ipv4=10.0.0.43 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-p9kmr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.61 ebbda71e-9a02-4e49-aca1-db1fdb31d1cb default }" containerID=be0ec036941dc9adce0ea760b56afcbb5116ccddb3fdada90401302dd8147f87 datapathConfiguration="&{false false false false false }" interface=lxc7ce800f7da09 k8sPodName=openstack/rook-ceph-detect-version-7jfh5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be0ec03694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be0ec03694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be0ec03694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identity=9523 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be0ec03694 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3834 identity=9523 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be0ec03694 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3834 identity=9523 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=be0ec03694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3834 identity=9523 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be0ec03694 endpointID=3834 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-7jfh5 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=b06584e1-667c-409a-9fb9-43819c526b5c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=be0ec03694 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3834 identity=9523 ipv4=10.0.0.61 ipv6= k8sPodName=openstack/rook-ceph-detect-version-7jfh5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.172 e251a3fd-9e0d-4bf8-b090-190de30f55b5 default }" containerID=bb46fd03faf68896a542c70d236cca6e2a3734552e07e6f1c932beb822c19aec datapathConfiguration="&{false false false false false }" interface=lxc512bc94f1b90 k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identity=4506 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=797 identity=4506 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bb46fd03fa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=797 identity=4506 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=endpoint level=info msg="Successful endpoint creation" containerID=bb46fd03fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=797 identity=4506 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bb46fd03fa endpointID=797 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-z2xvg subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=dde17eb7-7c7d-482d-b3f5-6d08949a1688 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=bb46fd03fa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=797 identity=4506 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-z2xvg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 15069f94-5704-4643-9d93-a7591298ea55 default }" containerID=7409974649984285072926018883ea5b561c7624d5c7423ffc949ee0d748e6e3 datapathConfiguration="&{false false false false false }" interface=lxccfb72408113d k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7409974649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7409974649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7409974649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=1253 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7409974649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1994 identity=1253 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7409974649 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1994 identity=1253 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7409974649 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1994 identity=1253 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=daemon level=info msg="Delete endpoint request" containerID=7409974649 endpointID=1994 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7409974649 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1994 identity=1253 ipv4=10.0.0.179 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6c0b2406-866f-4a7a-88ee-451963964a27 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 f39cb0cc-fb63-4a6e-9808-9efeadae71f6 default }" containerID=861170027ecbb8471d50da3184dc3623c34f711a16eaf9964a735f969d8c8d7a datapathConfiguration="&{false false false false false }" interface=lxcaf7812f0c5d5 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=861170027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=861170027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=861170027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identity=35843 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=861170027e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2668 identity=35843 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=861170027e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2668 identity=35843 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=861170027e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2668 identity=35843 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.94 35989d3a-8aab-48ff-8b24-90c095def796 default }" containerID=fe97f0dad8d72fa325f9c50608c5485536e9deb993f9e98561a49dbab1e29b72 datapathConfiguration="&{false false false false false }" interface=lxcdab979b27bd7 k8sPodName=openstack/glance-db-init-fqbzg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fe97f0dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fe97f0dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b977cb7b-f844-45b8-a957-3327497abd54,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b977cb7b-f844-45b8-a957-3327497abd54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b977cb7b-f844-45b8-a957-3327497abd54;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=b977cb7b-f844-45b8-a957-3327497abd54;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fe97f0dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=599 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b977cb7b-f844-45b8-a957-3327497abd54,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=b977cb7b-f844-45b8-a957-3327497abd54,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fe97f0dad8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=599 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fe97f0dad8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2711 identity=599 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fe97f0dad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=599 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fe97f0dad8 endpointID=2711 k8sNamespace=openstack k8sPodName=glance-db-init-fqbzg subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b977cb7b-f844-45b8-a957-3327497abd54 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=b977cb7b-f844-45b8-a957-3327497abd54 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fe97f0dad8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=599 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/glance-db-init-fqbzg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.14 90966692-f02e-4f4a-befc-c7f7fcf0136d default }" containerID=f063a21d1e012ef2b6547686d728b811b3b6c459fd91e39b7ccaa2484145e202 datapathConfiguration="&{false false false false false }" interface=lxc2bebd08ad9c3 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f063a21d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f063a21d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f063a21d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=8768 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f063a21d1e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1897 identity=8768 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 6c87f60f-42c8-4cd4-afaf-873b6af68f90 default }" containerID=3ccba9c7b2facb235c6be3ca2186efc5bfbf65b2a1a17c5e30808fa821078a02 datapathConfiguration="&{false false false false false }" interface=lxc034ea8bd87ac k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ccba9c7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ccba9c7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ccba9c7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=49608 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ccba9c7b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=301 identity=49608 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f063a21d1e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1897 identity=8768 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f063a21d1e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1897 identity=8768 ipv4=10.0.0.14 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-2l6kk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.37 93b851ae-65e5-4d5a-948e-848d7ed28276 default }" containerID=23560ef08ef3b9fa06fa83812eb87620e4380a64e3672e90fd29eefcf9bee7fe datapathConfiguration="&{false false false false false }" interface=lxca9a8300cebd5 k8sPodName=openstack/glance-db-sync-7z67g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=23560ef08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=23560ef08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=23560ef08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identity=51717 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=23560ef08e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3362 identity=51717 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ccba9c7b2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=301 identity=49608 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ccba9c7b2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=301 identity=49608 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-9zg2m subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=23560ef08e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3362 identity=51717 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=endpoint level=info msg="Successful endpoint creation" containerID=23560ef08e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3362 identity=51717 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=23560ef08e endpointID=3362 k8sNamespace=openstack k8sPodName=glance-db-sync-7z67g subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d9141bb8-c9eb-4538-9972-799a6dea13f7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=23560ef08e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3362 identity=51717 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-db-sync-7z67g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 d08474f1-fc56-4557-baaa-bd958eec0ee0 default }" containerID=96724f4b37c32ddd9b05bfccfbefafa584d33136a3ff7d6abfe649ac2f1359f1 datapathConfiguration="&{false false false false false }" interface=lxc7a681995b187 k8sPodName=openstack/glance-rabbit-init-2hcln labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=26160 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=125 identity=26160 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96724f4b37 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=125 identity=26160 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=endpoint level=info msg="Successful endpoint creation" containerID=96724f4b37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=26160 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96724f4b37 endpointID=125 k8sNamespace=openstack k8sPodName=glance-rabbit-init-2hcln subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b68ec73e-cfc7-49ab-a9d4-aad5075ca82e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=96724f4b37 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=125 identity=26160 ipv4=10.0.0.6 ipv6= k8sPodName=openstack/glance-rabbit-init-2hcln subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 289e3cee-e39f-4d5d-b3dd-b1eeb94c7be0 default }" containerID=4fc3d5475072bcbaed7e7ccbabf51cd95f320960d351aacdc8e6fa386652c1d1 datapathConfiguration="&{false false false false false }" interface=lxca788e5da16ed k8sPodName=openstack/glance-ks-service-jnz66 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fc3d54750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fc3d54750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fc3d54750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=33728 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4fc3d54750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=203 identity=33728 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fc3d54750 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=203 identity=33728 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fc3d54750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=203 identity=33728 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=daemon level=info msg="Delete endpoint request" containerID=4fc3d54750 endpointID=203 k8sNamespace=openstack k8sPodName=glance-ks-service-jnz66 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=eeb622bf-e46f-4b2e-a561-f63f9bb5cde4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4fc3d54750 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=203 identity=33728 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-jnz66 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.44 5af20efc-9899-4db2-acd6-df0c28d651a6 default }" containerID=aacedf17ad81890c0878e3c546673fd0531b2403b7b498c31379bc224b1ab147 datapathConfiguration="&{false false false false false }" interface=lxcc1a98ac7b218 k8sPodName=openstack/glance-ks-endpoints-6fwv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aacedf17ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aacedf17ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aacedf17ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=4883 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aacedf17ad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1368 identity=4883 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aacedf17ad datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1368 identity=4883 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aacedf17ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1368 identity=4883 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aacedf17ad endpointID=1368 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-6fwv8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=c88a3120-a94f-41cc-bf97-f72412cc2dd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=aacedf17ad datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1368 identity=4883 ipv4=10.0.0.44 ipv6= k8sPodName=openstack/glance-ks-endpoints-6fwv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.214 df98f873-8a2a-4002-b2fc-b2fb34263867 default }" containerID=eedf421560a1fcc5a30a85945b23579c6e637f5fcdbf6c5580ab3506ab9706a7 datapathConfiguration="&{false false false false false }" interface=lxc1bdf34e492d1 k8sPodName=openstack/glance-ks-user-zrb4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eedf421560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eedf421560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84f025fd-9509-4036-9a99-107c837758d6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=84f025fd-9509-4036-9a99-107c837758d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=84f025fd-9509-4036-9a99-107c837758d6;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=84f025fd-9509-4036-9a99-107c837758d6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eedf421560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=52034 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=84f025fd-9509-4036-9a99-107c837758d6,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=84f025fd-9509-4036-9a99-107c837758d6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eedf421560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=52034 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eedf421560 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=52034 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=eedf421560 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=52034 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=daemon level=info msg="Delete endpoint request" containerID=eedf421560 endpointID=471 k8sNamespace=openstack k8sPodName=glance-ks-user-zrb4b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=84f025fd-9509-4036-9a99-107c837758d6 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=84f025fd-9509-4036-9a99-107c837758d6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eedf421560 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=52034 ipv4=10.0.0.214 ipv6= k8sPodName=openstack/glance-ks-user-zrb4b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.119 764522c6-82a1-44eb-8d63-407dc995242d default }" containerID=6f2e0f016487b35f46f0b769217c5309d6fe93c8ce901b0a1a7cdcdd14e6c1dd datapathConfiguration="&{false false false false false }" interface=lxc263febcfcf52 k8sPodName=openstack/glance-metadefs-load-z7drl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=34314 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2279 identity=34314 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6f2e0f0164 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2279 identity=34314 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=endpoint level=info msg="Successful endpoint creation" containerID=6f2e0f0164 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=34314 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6f2e0f0164 endpointID=2279 k8sNamespace=openstack k8sPodName=glance-metadefs-load-z7drl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=9155cdff-ca7f-4c1a-97f5-6da0927fd9ae k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=6f2e0f0164 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2279 identity=34314 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/glance-metadefs-load-z7drl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 076c0938-6bea-4328-a25d-861f2bc733bb default }" containerID=13c09528ab8abe49d22fcec54fb83256a697c4eb414926b100b31cb2b4f689ab datapathConfiguration="&{false false false false false }" interface=lxc136e10d6e2c7 k8sPodName=openstack/glance-storage-init-xcsf8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=47531 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=232 identity=47531 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13c09528ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=232 identity=47531 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13c09528ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=47531 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=13c09528ab endpointID=232 k8sNamespace=openstack k8sPodName=glance-storage-init-xcsf8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=51179255-e0ef-4432-a9cd-d48cab99b502 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=13c09528ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=232 identity=47531 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/glance-storage-init-xcsf8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 9f5145e5-85c5-4922-8d45-f15ce260864f default }" containerID=d673417c4f8745a63e55fa176f76295b407ec338966ca2a128cb1b5b76e3ac80 datapathConfiguration="&{false false false false false }" interface=lxcbce6a9d92d9a k8sPodName=openstack/glance-api-6567d96f47-qnmls labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=17431 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1713 identity=17431 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d673417c4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1713 identity=17431 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls subsys=endpoint level=info msg="Successful endpoint creation" containerID=d673417c4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1713 identity=17431 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/glance-api-6567d96f47-qnmls subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.207 22e86baa-a2f8-4d82-a013-a3f18f3798cc default }" containerID=e233ee8170fd541a151f6437610099f7b662b5607bbaa5c0ef7562d5b0e54875 datapathConfiguration="&{false false false false false }" interface=lxc6e0d7c5408f7 k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.119 99814d08-cac6-4b70-8344-4aa478d0d9c9 default }" containerID=c36baee82a1996203f9b24f9fa691032de3ff24e113c98761147010f2d42afcb datapathConfiguration="&{false false false false false }" interface=lxcf181e2134a71 k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e233ee8170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl subsys=endpoint level=info msg="New endpoint" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e233ee8170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e233ee8170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=27901 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e233ee8170 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=768 identity=27901 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identity=6359 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=830 identity=6359 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e233ee8170 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=768 identity=27901 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl subsys=endpoint level=info msg="Successful endpoint creation" containerID=e233ee8170 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=768 identity=27901 ipv4=10.0.0.207 ipv6= k8sPodName=openstack/staffeln-conductor-5bdb89df4f-p6gwl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c36baee82a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=830 identity=6359 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk subsys=endpoint level=info msg="Successful endpoint creation" containerID=c36baee82a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=830 identity=6359 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/staffeln-api-66b649dd8b-cwmxk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.9 67ce2794-c979-4b97-ae08-02f8f5945cf9 default }" containerID=8a119e404b513d4b603d5f75f3bff9d89161b218af231ac1a046d919e25dffe9 datapathConfiguration="&{false false false false false }" interface=lxc61d372dd54be k8sPodName=openstack/staffeln-db-init-2nnmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a119e404b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a119e404b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a119e404b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=3439 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a119e404b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2343 identity=3439 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a119e404b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2343 identity=3439 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a119e404b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=3439 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a119e404b endpointID=2343 k8sNamespace=openstack k8sPodName=staffeln-db-init-2nnmt subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=7e620b10-c31c-4fe3-aeb8-fc343154c36d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=8a119e404b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2343 identity=3439 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/staffeln-db-init-2nnmt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.39 e00b1c03-87f2-4ebc-aa01-b39082308a3b default }" containerID=8874e4fc8a3e73fa69aea71fb4b5040da0a7cd5640cef6fd32037f69347f818d datapathConfiguration="&{false false false false false }" interface=lxc576f071ef805 k8sPodName=openstack/staffeln-db-sync-24fd2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8874e4fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8874e4fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8874e4fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=61864 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=c8bd95e2-756b-4f98-9209-43b8c52b5f07,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8874e4fc8a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=471 identity=61864 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8874e4fc8a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=471 identity=61864 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8874e4fc8a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=471 identity=61864 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/staffeln-db-sync-24fd2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager