level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.081007ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="82.592µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.163819ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="18.151µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=100.13871ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.36µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="13.15µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="101.123µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="61.962µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="64.012µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="367.969µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.816945ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.520456ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="55.071µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="61.232µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="241.397µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="104.303µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="77.982µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=66.733421ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="109.203µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="15.551µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.4.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.981867ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="13.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.492229ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.35µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.883848ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.34µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="5.07µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.5µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="41.511µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="12.451µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="45.151µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="423.98µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="12.201µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="369.98µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration="884.763µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.246141ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.31µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="26.961µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.4 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.4 ipAddr.ipv6="" k8sNodeIP=199.204.45.4 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.4" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.231" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.4" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.4} {CiliumInternalIP 10.0.0.231}] 10.0.0.0/24 [] [] 10.0.0.171 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40077" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.703092817s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="16.19µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.36µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="42.851µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="8.74µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.711981295s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=310.811674ms file-path=/var/run/cilium/state/templates/b8e694103632f587fa9bcdc175117def67a1ccd7b81b1b2947fd5fa837c7b439/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.72 980b57c1-fd38-4fd5-b039-e25471746e69 default }" containerID=a9c5884aa4b3b9b130d9d336cdfaa4580d0775012a167c5ef8c8c45e81f2c06b datapathConfiguration="&{false false false false false }" interface=lxcab2aa272ab2b k8sPodName=kube-system/coredns-7c96b6546b-ch2fk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9c5884aa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9c5884aa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=a9c5884aa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=21855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9c5884aa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3206 identity=21855 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 87687224-8ab0-44a7-8f89-ca5149298d1a default }" containerID=e84e19f05575734486a4ce4d22705824064c143d1a3b56f75a0bc881ce4b486e datapathConfiguration="&{false false false false false }" interface=lxcc14f8b0f0dd7 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e84e19f055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e84e19f055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e84e19f055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=11357 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e84e19f055 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3922 identity=11357 ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1276 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 ipv4=10.0.0.171 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identityLabels="reserved:health" ipv4=10.0.0.171 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=816 identity=4 identityLabels="reserved:health" ipv4=10.0.0.171 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.07323778s file-path=/var/run/cilium/state/templates/7ad7574b8a1c600d1eb4563a51fb4e505b8d1f0ae9a0c6d293331076b67feb91/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=e84e19f055 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3922 identity=11357 ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=endpoint level=info msg="Successful endpoint creation" containerID=e84e19f055 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3922 identity=11357 ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9c5884aa4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3206 identity=21855 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9c5884aa4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3206 identity=21855 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=816 identity=4 ipv4=10.0.0.171 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e84e19f055 endpointID=3922 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-ggq2w subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=bb2f5017-7355-4f92-b66f-68b8cc251bf7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=e84e19f055 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3922 identity=11357 ipv4=10.0.0.134 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-ggq2w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 39118e06-e09a-439e-b4b0-4d4f6c8ce297 default }" containerID=7692e322e6c45c67abdd157ac9da6da1fea02522acb2460e2d95f8481a3fdaf0 datapathConfiguration="&{false false false false false }" interface=lxcf3db2f595efb k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=63841 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=456 identity=63841 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7692e322e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=456 identity=63841 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q subsys=endpoint level=info msg="Successful endpoint creation" containerID=7692e322e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=456 identity=63841 ipv4=10.0.0.68 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-bph7q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01276 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01276 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01276 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01276:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.242 5954b31d-accc-43e0-8a2b-d721b34d650e default }" containerID=18fc47774dbb557b5e2eeb531203f477743c2eb06b51ed6b0e33552d1d47abaa datapathConfiguration="&{false false false false false }" interface=lxc4915e01870a7 k8sPodName=kube-system/coredns-67659f764b-xjbm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18fc47774d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18fc47774d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=18fc47774d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=21855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18fc47774d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=21855 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 8f6dbaf5-f4f7-40e2-9da5-93aeac276047 default }" containerID=4292f0a8d6c3b5427f2e45dedbe397638312bc2aaaf6f3e4ecab3272a5c385a0 datapathConfiguration="&{false false false false false }" interface=lxc7f8363d034bc k8sPodName=kube-system/coredns-67659f764b-6mt72 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4292f0a8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4292f0a8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4292f0a8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=21855 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4292f0a8d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2295 identity=21855 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18fc47774d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=449 identity=21855 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=18fc47774d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=21855 ipv4=10.0.0.242 ipv6= k8sPodName=kube-system/coredns-67659f764b-xjbm4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4292f0a8d6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2295 identity=21855 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4292f0a8d6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2295 identity=21855 ipv4=10.0.0.178 ipv6= k8sPodName=kube-system/coredns-67659f764b-6mt72 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 4a746715-3dad-44a1-9fc6-3f8a795b293c default }" containerID=035f183cafc3100f02f6232c0877f5096a430965e64a7e740742b978d4a3f5ce datapathConfiguration="&{false false false false false }" interface=lxc8e914e1a9730 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=035f183caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=035f183caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=035f183caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=7436 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=035f183caf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=329 identity=7436 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=035f183caf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=329 identity=7436 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=035f183caf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=329 identity=7436 ipv4=10.0.0.121 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-mbzv7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9c5884aa4 endpointID=3206 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-ch2fk subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=a9c5884aa4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3206 identity=21855 ipv4=10.0.0.72 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ch2fk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.6 2bfad593-ad2e-44a3-8f06-5dd54b3b35a7 default }" containerID=d45f7e720299b23d9c5a9518e73f0d7bdcfaae4e67ed919b2e619280c129c518 datapathConfiguration="&{false false false false false }" interface=lxcb086f84aea91 k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d45f7e7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.29 ef6b4338-464b-46d3-aa4c-8e0460463751 default }" containerID=39462b568af230b20ab2cedeb44dc62624d4268d6bc7a81e116aae699c73a400 datapathConfiguration="&{false false false false false }" interface=lxc1f7d5c4a3c20 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=d45f7e7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 587b1651-fdc3-4383-a6f2-cd83aa2828fc default }" containerID=6bfd70df5367231a1271997afd5835c3880f0b83d70fd73eb71a8bed31045624 datapathConfiguration="&{false false false false false }" interface=lxc49dbe18b0a83 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="New endpoint" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb subsys=endpoint level=info msg="New endpoint" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=d45f7e7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=6110 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d45f7e7202 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1992 identity=6110 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=7896 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2742 identity=7896 ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=16954 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=769 identity=16954 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d45f7e7202 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1992 identity=6110 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d45f7e7202 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1992 identity=6110 ipv4=10.0.0.6 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-ftpq9 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=39462b568a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2742 identity=7896 ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb subsys=endpoint level=info msg="Successful endpoint creation" containerID=39462b568a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2742 identity=7896 ipv4=10.0.0.29 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-8w9lb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6bfd70df53 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=769 identity=16954 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bfd70df53 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=769 identity=16954 ipv4=10.0.0.71 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4wv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.130 b4051777-9cfb-4fb0-9315-2f3c7b133180 default }" containerID=fd5e727c79c52c82c2f4af8207152c0ec11b6a37eb18bd472408b4e0f94fb3a8 datapathConfiguration="&{false false false false false }" interface=lxc75e20399a7f5 k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd5e727c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd5e727c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd5e727c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=54239 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd5e727c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2479 identity=54239 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fd5e727c79 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2479 identity=54239 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd5e727c79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2479 identity=54239 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd5e727c79 endpointID=2479 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-m28ff subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=1a42d5fd-ba73-43fc-99bd-5fe7e80893da k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=fd5e727c79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2479 identity=54239 ipv4=10.0.0.130 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-m28ff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 24456d59-4237-40ef-b5b2-173562d223fb default }" containerID=d057af2b0abce2faa4ac283e80781790706b7d2702b70175827faf626f1c6170 datapathConfiguration="&{false false false false false }" interface=lxcbf482e04e43c k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d057af2b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d057af2b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d057af2b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=24469 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d057af2b0a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4 identity=24469 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d057af2b0a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4 identity=24469 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d057af2b0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4 identity=24469 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d057af2b0a endpointID=4 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-wjvkm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=24ecffac-95fd-458f-b36d-fb1cd7635ca7 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d057af2b0a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4 identity=24469 ipv4=10.0.0.130 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-wjvkm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.113 68d5349a-984b-4c78-9656-03598d89f1b0 default }" containerID=67543075606717c3552ee163dec30f7bc35f2268a766a0a639d6d6c44ee8f666 datapathConfiguration="&{false false false false false }" interface=lxc8c128984fca7 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6754307560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6754307560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6754307560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identity=38644 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6754307560 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2413 identity=38644 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=6754307560 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2413 identity=38644 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6754307560 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2413 identity=38644 ipv4=10.0.0.113 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-sn9vw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.114 f8ccf2e5-655c-4c68-946f-16d8d3594044 default }" containerID=68979ade560b63707e26860a11b08f8c0cf3b405197f2753bededf53a11c1512 datapathConfiguration="&{false false false false false }" interface=lxce0c48f4f9412 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68979ade56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68979ade56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68979ade56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=12165 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68979ade56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=426 identity=12165 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68979ade56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=426 identity=12165 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=68979ade56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=426 identity=12165 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68979ade56 endpointID=426 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-9rfm4 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0a7023ba-d1e5-4c78-b43d-8bfdc80bec98 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=68979ade56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=426 identity=12165 ipv4=10.0.0.114 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-9rfm4 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=3227af81-a10a-4ae5-b897-76acb24fd418] Description:}]" policyAddRequest=a1b9aeb6-e4d0-4c7e-9d6f-062a944538eb subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a1b9aeb6-e4d0-4c7e-9d6f-062a944538eb policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=13403db0-42ff-4996-a593-ec4994649931] Description:}]" policyAddRequest=649017ea-857d-4892-ad43-f02ba92e251b subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=649017ea-857d-4892-ad43-f02ba92e251b policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.172 de50e92a-7a7e-414d-bcf0-a842f2e60308 default }" containerID=9d1d3693366a9a76d211d9cf5bf5dd18663bbbe1ea3223076091d414d2d821c7 datapathConfiguration="&{false false false false false }" interface=lxc4977be3b6e78 k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.8.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=6966 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.8.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2408 identity=6966 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9d1d369336 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2408 identity=6966 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d1d369336 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2408 identity=6966 ipv4=10.0.0.172 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-67fdb85b4f-4hlvq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.79 c8f88b69-7aac-44ab-9ce3-c5cdf92713c8 default }" containerID=1e833123cba792ebfd1c7ccb54926401a905338503c85a8a38c5e8f0794d2780 datapathConfiguration="&{false false false false false }" interface=lxcc398fa394352 k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e833123cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e833123cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.13.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e833123cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=7071 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.13.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.2.4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e833123cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=660 identity=7071 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1e833123cb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=660 identity=7071 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e833123cb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=660 identity=7071 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-5c9876cc97-zx4gk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.19 26eac9fe-a373-4fff-985b-93775c32f72b default }" containerID=17006b4c88bdf53f843d90a61f6bf1187d904f454ba44313aa7d6f654d3b97bb datapathConfiguration="&{false false false false false }" interface=lxcebc5070c7abd k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=62588 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=964 identity=62588 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=17006b4c88 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=964 identity=62588 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=17006b4c88 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=964 identity=62588 ipv4=10.0.0.19 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hmr5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.124 5fe60244-8f89-4339-971b-d05ff3e7970f default }" containerID=c9192563caf7289ffca845a999fc2ca85217f8cf318d4cdebab2ca24c1f63d31 datapathConfiguration="&{false false false false false }" interface=lxc9fa57e3fc693 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9192563ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9192563ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9192563ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=47182 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c9192563ca datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=324 identity=47182 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c9192563ca datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=324 identity=47182 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9192563ca datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=324 identity=47182 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.39 c591fd0b-a9b2-4b52-a7db-d98001cd5834 default }" containerID=ccb10f55ab8732dbb1d102dc8723b6f383726f41c44f09d080365f3c699546a9 datapathConfiguration="&{false false false false false }" interface=lxc9e34c9072390 k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ccb10f55ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ccb10f55ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ccb10f55ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ccb10f55ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=560 identity=3371 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ccb10f55ab datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=560 identity=3371 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=endpoint level=info msg="Successful endpoint creation" containerID=ccb10f55ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=560 identity=3371 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ccb10f55ab endpointID=560 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=ccb10f55ab datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=560 identity=3371 ipv4=10.0.0.39 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0319687e-4cd8-4b67-8af9-154860dbdd3e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 c81d9f20-92e1-4e84-bbbc-f0500aaba39b default }" containerID=a056803aad97aa61e4689eb7736c348caac580822ed4403a35894379d187335d datapathConfiguration="&{false false false false false }" interface=lxcdcd21118df72 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=63423 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=509 identity=63423 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a056803aad datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=509 identity=63423 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a056803aad datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=509 identity=63423 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=611490ee-36a3-4de0-a5a7-1f4dc0648cbd] Description:}]" policyAddRequest=1fabb3f1-8275-43b8-a570-ad9de732e426 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1fabb3f1-8275-43b8-a570-ad9de732e426 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.80 f5083180-3d01-40ba-83f9-76ab69e6dd41 default }" containerID=6c14ba3e685e1e2abccf5ef8da311ddaa18f53fc7a038e7d08f7958623724b34 datapathConfiguration="&{false false false false false }" interface=lxc081c1efc6a7e k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c14ba3e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c14ba3e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=23.0.7;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-20.0.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6c14ba3e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=15776 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=23.0.7,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-20.0.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6c14ba3e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=13 identity=15776 ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c14ba3e68 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=13 identity=15776 ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c14ba3e68 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=13 identity=15776 ipv4=10.0.0.80 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.005830075615133848 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.163 1892ad1c-daf3-47ea-9faa-f4edfdde85f5 default }" containerID=b187ba2c1842bf73277eca035b4c0c0e592d5468755dd619fa0dcf29e8e2ea63 datapathConfiguration="&{false false false false false }" interface=lxc8fafeff80afe k8sPodName=monitoring/node-feature-discovery-worker-q7jrb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identity=21408 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3802 identity=21408 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b187ba2c18 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3802 identity=21408 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b187ba2c18 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3802 identity=21408 ipv4=10.0.0.163 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-q7jrb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.119 e459aac0-8df8-4b91-8dfe-07615d5055f4 default }" containerID=1a0f1ac325e3892c760d998e720624218d801154acf361458932113c77360a4f datapathConfiguration="&{false false false false false }" interface=lxcfff11f0a9f4c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1a0f1ac325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1a0f1ac325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.152 1f9a9f3b-1402-4f95-b6ee-b67e4fd4829b default }" containerID=a099229470a5b33aef66b38791ee4b77a70d10855d3fb88a0deebd7aadab6ec7 datapathConfiguration="&{false false false false false }" interface=lxcc6f0e654b63a k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a099229470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a099229470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1a0f1ac325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=33727 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1a0f1ac325 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2652 identity=33727 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a099229470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=22430 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a099229470 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=142 identity=22430 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1a0f1ac325 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2652 identity=33727 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1a0f1ac325 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2652 identity=33727 ipv4=10.0.0.119 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-q2j22 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a099229470 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=142 identity=22430 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a099229470 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=142 identity=22430 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-cxqt9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.11 a5f8b3ae-ce6b-4089-bd08-5f824a5264b9 default }" containerID=8ade7a1ecc7ee124264fb8ce8a5538b2f7a762e036924e4c5480cf6477a7cc21 datapathConfiguration="&{false false false false false }" interface=lxcb1f4282c06c2 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ade7a1ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ade7a1ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ade7a1ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=46886 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ade7a1ecc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=397 identity=46886 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ade7a1ecc datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=397 identity=46886 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s subsys=endpoint level=info msg="Successful endpoint creation" containerID=8ade7a1ecc datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=397 identity=46886 ipv4=10.0.0.11 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-m4d9s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1276 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01276 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01276 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01276 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01276:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1276 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 6c958952-983d-405e-9264-80582c119ea3 default }" containerID=3d68a89d53823831baa3fd5ae108fba11230fee86a558596028df594f70bbfe5 datapathConfiguration="&{false false false false false }" interface=lxcffd0f7d30fd9 k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3d68a89d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3d68a89d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3d68a89d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=45391 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3d68a89d53 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=948 identity=45391 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3d68a89d53 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=948 identity=45391 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=3d68a89d53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=948 identity=45391 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3d68a89d53 endpointID=948 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-scjnk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=4ef0458d-2a0a-4cdc-a119-194bce12f5e2 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3d68a89d53 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=948 identity=45391 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-scjnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 99768889-e84d-468e-a425-9936cab3441c default }" containerID=ec7e98853ab4548dd28c7b6e0b1ab94bff64710ea0e79ffafc129764653b4092 datapathConfiguration="&{false false false false false }" interface=lxc42c06498a034 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=36560 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2300 identity=36560 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.167 09316534-021f-49f6-9761-78e7b393637b default }" containerID=01e20603ae510227ea084f33aae20ddee6dd7aa159295fba49aa71e887e89e94 datapathConfiguration="&{false false false false false }" interface=lxc82c31586f0ef k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01e20603ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.202 a2507b13-5cbe-4547-b6ff-d3e4bdcb05de default }" containerID=1c5dfa290a3a53e14025b3eac8d2e428821f958521b9a21041ffa8e19e80f681 datapathConfiguration="&{false false false false false }" interface=lxc304ea6db934f k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c5dfa290a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01e20603ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=1c5dfa290a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:chart=kube-prometheus-stack-58.2.1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01e20603ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identity=24899 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.2.1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=01e20603ae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identity=24899 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c5dfa290a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=12672 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c5dfa290a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1185 identity=12672 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ec7e98853a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2300 identity=36560 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ec7e98853a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2300 identity=36560 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-8flcj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=01e20603ae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2708 identity=24899 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g subsys=endpoint level=info msg="Successful endpoint creation" containerID=01e20603ae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2708 identity=24899 ipv4=10.0.0.167 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-7d58f4b66c-npq4g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1c5dfa290a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1185 identity=12672 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c5dfa290a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1185 identity=12672 ipv4=10.0.0.202 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-5b5bc6489f-47hp7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.222 c9b2b3ec-5563-4f6c-93fe-7f61f7300c05 default }" containerID=daf8cf1a36211e1b7fbd1f71e05b32e3fb293a9b1968e9040cb2d847baa99f1d datapathConfiguration="&{false false false false false }" interface=lxc704d8ca9cea3 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=daf8cf1a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3495 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=daf8cf1a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3495 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.2.1;k8s:batch.kubernetes.io/controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.2.1;k8s:controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=daf8cf1a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3495 identity=17504 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.2.1,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.2.1,k8s:controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=daf8cf1a36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3495 identity=17504 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=daf8cf1a36 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3495 identity=17504 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=endpoint level=info msg="Successful endpoint creation" containerID=daf8cf1a36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3495 identity=17504 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=daf8cf1a36 endpointID=3495 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-lk4qj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.2.1 k8s:batch.kubernetes.io/controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.2.1 k8s:controller-uid=2110b9b0-4c69-43a1-b5f5-e62af9e7ab5e k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=daf8cf1a36 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3495 identity=17504 ipv4=10.0.0.222 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-lk4qj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 b9f028d6-5bc0-4295-9005-20a55f120470 default }" containerID=36c2798d9fe29cc399cff553b6b4193e653c4261fe388aedad0a27e41e864ec2 datapathConfiguration="&{false false false false false }" interface=lxce39ffef6af30 k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36c2798d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36c2798d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36c2798d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36c2798d9f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=900 identity=3371 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36c2798d9f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=900 identity=3371 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36c2798d9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=900 identity=3371 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.50 5387c362-a848-4223-8d6c-a3c1e1bda562 default }" containerID=14eb9fed59731776a53cbf32de299d69f4492220afd7b54a95fd851384e91a6b datapathConfiguration="&{false false false false false }" interface=lxcf2a2edac7377 k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14eb9fed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14eb9fed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=14eb9fed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14eb9fed59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=469 identity=3371 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14eb9fed59 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=469 identity=3371 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14eb9fed59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=469 identity=3371 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=daemon level=info msg="Delete endpoint request" containerID=36c2798d9f endpointID=900 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=14eb9fed59 endpointID=469 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=14eb9fed59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=469 identity=3371 ipv4=10.0.0.50 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d447b949-431f-42cc-9413-e4344350e1d8 subsys=endpoint level=info msg="Removed endpoint" containerID=36c2798d9f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=900 identity=3371 ipv4=10.0.0.26 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-ff847974-0763-4fe7-903e-ff245d071e44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 58c7796c-4609-40df-96e0-ac254cd5214e default }" containerID=0fa74828f365dbd6e837ce6b1951a24364b3c4b3b47af5481f654a62f117aa3f datapathConfiguration="&{false false false false false }" interface=lxc5f59f62bb679 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0fa74828f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0fa74828f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0fa74828f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=15946 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0fa74828f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=736 identity=15946 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 3e7b4c18-8bc4-4182-8cbb-ca3c3d42e441 default }" containerID=b9d04ff3d445df233901943d50d5ae68ad84281b810479b0de1ad4de0aaa0d16 datapathConfiguration="&{false false false false false }" interface=lxcbaca0c9813b3 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9d04ff3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9d04ff3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9d04ff3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=23370 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9d04ff3d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1667 identity=23370 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0fa74828f3 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=736 identity=15946 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0fa74828f3 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=736 identity=15946 ipv4=10.0.0.112 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.63 e8fa7528-279f-4262-9fbd-3e0f6771e255 default }" containerID=9ba9300627c71beb15cea12ee5b8cc9c5e92b03ab41a2e427b736373d9c6d301 datapathConfiguration="&{false false false false false }" interface=lxc5d188789ad12 k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9ba9300627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ba9300627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ba9300627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=59932 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ba9300627 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=903 identity=59932 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9d04ff3d4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1667 identity=23370 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9d04ff3d4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1667 identity=23370 ipv4=10.0.0.16 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.48 11f1103e-35bd-4ef5-a84d-57e9f06dd8e5 default }" containerID=db2baa00a4b26b4e1c9d44edba35854a2497d9c548a1ba5dc24d40812b33746d datapathConfiguration="&{false false false false false }" interface=lxc2feb4e112236 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db2baa00a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db2baa00a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db2baa00a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=5632 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db2baa00a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=212 identity=5632 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 fd97bc52-28e3-46b1-ba82-db26fac7de44 default }" containerID=c80dfbe5724bdc1581893f6d198bb66c1e10889727d109ee92cc0dc0e559ab36 datapathConfiguration="&{false false false false false }" interface=lxcd2df6349d66f k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c80dfbe572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c80dfbe572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c80dfbe572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=2135 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c80dfbe572 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=186 identity=2135 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ba9300627 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=903 identity=59932 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ba9300627 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=903 identity=59932 ipv4=10.0.0.63 ipv6= k8sPodName=monitoring/loki-gateway-748b556d75-j5jsc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=db2baa00a4 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=212 identity=5632 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db2baa00a4 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=212 identity=5632 ipv4=10.0.0.48 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c80dfbe572 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=186 identity=2135 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c80dfbe572 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=186 identity=2135 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 59598086-d0bf-45b0-8b68-cef41e6f6d6b default }" containerID=b826e2911c71b9235276dc1faba38db75dfeb25af488747c27a5674607c2dfb7 datapathConfiguration="&{false false false false false }" interface=lxc7fca9630a19c k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b826e2911c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b826e2911c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b826e2911c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b826e2911c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2727 identity=3371 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b826e2911c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2727 identity=3371 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b826e2911c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2727 identity=3371 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.188 8b6e0070-d148-4dc4-aeed-4497542bb104 default }" containerID=6b12db080618cad40518c44b358d5528d137c6ef387dbfa5c4dff56613c27542 datapathConfiguration="&{false false false false false }" interface=lxcbe8cbbc68943 k8sPodName=monitoring/vector-fvchw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b12db0806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b12db0806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=6b12db0806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=13918 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b12db0806 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=13918 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6b12db0806 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1272 identity=13918 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b12db0806 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1272 identity=13918 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/vector-fvchw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b826e2911c endpointID=2727 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b826e2911c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2727 identity=3371 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c1457de8-2391-4d62-862f-255d1f5ee45b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 455bbaa7-efd2-43a2-a727-985bb8b33a24 default }" containerID=0112bec66d2259499c53a5c1583aebadd888588ae1ba599f47594ae6a4346d4c datapathConfiguration="&{false false false false false }" interface=lxc47b00de7c083 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=2175 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4013 identity=2175 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0112bec66d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=4013 identity=2175 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0112bec66d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=4013 identity=2175 ipv4=10.0.0.12 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.76 43bc0cd0-1d94-4b61-960a-5bfedfc97eac default }" containerID=4a325a21b90605186ad06a9ad4a5a8baacbb86d722f5b1151b962b5e31b895f0 datapathConfiguration="&{false false false false false }" interface=lxc92a8529e068e k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4a325a21b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4a325a21b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.12.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4a325a21b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=11549 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.12.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4a325a21b9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2389 identity=11549 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4a325a21b9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2389 identity=11549 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd subsys=endpoint level=info msg="Successful endpoint creation" containerID=4a325a21b9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2389 identity=11549 ipv4=10.0.0.76 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7c6f84b96c-vdrsd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 263f805f-f294-4812-94a0-159f74bb8918 default }" containerID=bbfb1dd3acc4d0deaa82861972e64d60782540c70766ea7e1c4cb93d937c9ca4 datapathConfiguration="&{false false false false false }" interface=lxca8d16864a30b k8sPodName=openstack/memcached-memcached-6479589586-h7whk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bbfb1dd3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bbfb1dd3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bbfb1dd3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=6201 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bbfb1dd3ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3731 identity=6201 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=bbfb1dd3ac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3731 identity=6201 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk subsys=endpoint level=info msg="Successful endpoint creation" containerID=bbfb1dd3ac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3731 identity=6201 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-h7whk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 e43141ea-854a-49b1-a0c7-bee7d6f743a8 default }" containerID=f3a10011f1b458949086586d0de55b0c0d863b04280ec8a3e2e3bf6f6b347ac2 datapathConfiguration="&{false false false false false }" interface=lxc581311c807fc k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f3a10011f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f3a10011f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f3a10011f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f3a10011f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1799 identity=3371 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f3a10011f1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1799 identity=3371 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f3a10011f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1799 identity=3371 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=daemon level=info msg="Delete endpoint request" containerID=f3a10011f1 endpointID=1799 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f3a10011f1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1799 identity=3371 ipv4=10.0.0.180 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-1cf280d1-7cd8-4c37-b656-493834bd9e35 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 59493897-d912-4111-8ff6-dd07c0501299 default }" containerID=a96ed87dc8d6740b378d6bf4c96dda15f1d3207feedf6c514b0c48650739792d datapathConfiguration="&{false false false false false }" interface=lxc8130e6220199 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a96ed87dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a96ed87dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a96ed87dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=32968 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a96ed87dc8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=32968 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a96ed87dc8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=393 identity=32968 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a96ed87dc8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=393 identity=32968 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 1e829e5b-2f9a-4dd6-9abc-7316a19dd6af default }" containerID=6846bd22f824e7d8c640cc9e24cfcfca1dc22e87687e4c332c110754dbb3b0ec datapathConfiguration="&{false false false false false }" interface=lxcababbcb430b1 k8sPodName=openstack/keystone-api-65d49f65dd-gs9td labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=17977 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1028 identity=17977 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.77 1a7baae7-5b5c-4db1-ba96-299ae765b0ac default }" containerID=3207b875c0ee9dcf4ecd87082e0ec17320544d4f9f0d0b9c1794073e731ab63b datapathConfiguration="&{false false false false false }" interface=lxc8dc8e8da58e5 k8sPodName=openstack/keystone-credential-setup-5qf6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3207b875c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3207b875c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3207b875c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=14804 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3207b875c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1488 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6846bd22f8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1028 identity=17977 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td subsys=endpoint level=info msg="Successful endpoint creation" containerID=6846bd22f8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1028 identity=17977 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-65d49f65dd-gs9td subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3207b875c0 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1488 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=3207b875c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1488 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3207b875c0 endpointID=1488 k8sNamespace=openstack k8sPodName=keystone-credential-setup-5qf6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=8433c5c6-60bd-4735-a61b-cdf93b6f0e34 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3207b875c0 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1488 identity=14804 ipv4=10.0.0.77 ipv6= k8sPodName=openstack/keystone-credential-setup-5qf6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 9168bee0-9c56-466d-a309-69b7e49f1437 default }" containerID=f41da32faee09b65828b9e0994172cfb821973b08e033ddbd6203cf8751917dd datapathConfiguration="&{false false false false false }" interface=lxc682a1e612c70 k8sPodName=openstack/keystone-db-init-z6bbk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f41da32fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f41da32fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f41da32fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=2357 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f41da32fae datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3583 identity=2357 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f41da32fae datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3583 identity=2357 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=endpoint level=info msg="Successful endpoint creation" containerID=f41da32fae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3583 identity=2357 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f41da32fae endpointID=3583 k8sNamespace=openstack k8sPodName=keystone-db-init-z6bbk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=e69b6750-69de-4d47-905c-57dbb3dafd79 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f41da32fae datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3583 identity=2357 ipv4=10.0.0.100 ipv6= k8sPodName=openstack/keystone-db-init-z6bbk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 fd45b994-a5a4-45e7-991c-da214aa32b50 default }" containerID=12e489a9bf1b733a1f266ff63c7f7e62b0b25546a414e4b74d8ca29db19e64c2 datapathConfiguration="&{false false false false false }" interface=lxc5dd14ff2516f k8sPodName=openstack/keystone-fernet-setup-qqcqs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=12e489a9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=12e489a9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=12e489a9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=9643 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=12e489a9bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2150 identity=9643 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=12e489a9bf datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2150 identity=9643 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=endpoint level=info msg="Successful endpoint creation" containerID=12e489a9bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2150 identity=9643 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=daemon level=info msg="Delete endpoint request" containerID=12e489a9bf endpointID=2150 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-qqcqs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=c81c5136-9919-45cc-a497-6a2fd3be7e19 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=12e489a9bf datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2150 identity=9643 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-fernet-setup-qqcqs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 439012ba-cbeb-4d05-a555-ea35d3274564 default }" containerID=b9974b283327cfb7b97d4b57fa99394a5ba592a57117426b6bf57b4286df723c datapathConfiguration="&{false false false false false }" interface=lxcbd835ace618c k8sPodName=openstack/keystone-db-sync-j8hzn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9974b2833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9974b2833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b9974b2833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=27901 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9974b2833 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=792 identity=27901 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9974b2833 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=792 identity=27901 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9974b2833 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=792 identity=27901 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=daemon level=info msg="Delete endpoint request" containerID=b9974b2833 endpointID=792 k8sNamespace=openstack k8sPodName=keystone-db-sync-j8hzn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=eac26367-0ba1-4508-9fbd-e2db79a053e4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b9974b2833 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=792 identity=27901 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-db-sync-j8hzn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 b6ee9966-474f-467f-a987-05a5739f6585 default }" containerID=62a027d1d6680a1b395794a568bf9fa2263ffe103defa7f32a1851b05bed3f20 datapathConfiguration="&{false false false false false }" interface=lxc9e2a53502b2f k8sPodName=openstack/keystone-rabbit-init-fl69h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=26649 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1081 identity=26649 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=62a027d1d6 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1081 identity=26649 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=endpoint level=info msg="Successful endpoint creation" containerID=62a027d1d6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1081 identity=26649 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=62a027d1d6 endpointID=1081 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fl69h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=c24123e3-2964-4cc7-8f30-ffe474a33fce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=62a027d1d6 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1081 identity=26649 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/keystone-rabbit-init-fl69h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 9d514c54-e0dc-42fe-8cbb-8590a7d2fc57 default }" containerID=14a5295b392f2f6fc81c6e13bef87f1ad033c23a91fc0bafa80cc74409b94592 datapathConfiguration="&{false false false false false }" interface=lxcd995856be3f6 k8sPodName=openstack/keystone-domain-manage-s4nm6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14a5295b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14a5295b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14a5295b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=55388 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14a5295b39 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=55388 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14a5295b39 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=309 identity=55388 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14a5295b39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=309 identity=55388 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03326930620747494 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=14a5295b39 endpointID=309 k8sNamespace=openstack k8sPodName=keystone-domain-manage-s4nm6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=4559f7e0-b362-4f21-b809-b38170ee34d2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=14a5295b39 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=309 identity=55388 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/keystone-domain-manage-s4nm6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 b91dc557-aec1-4c32-94d5-5b200ff688da default }" containerID=24cbe1a4859d4a521d73eb3b9aada051c3aac381c584b5c596cf94d3c97d7ef8 datapathConfiguration="&{false false false false false }" interface=lxcda35cfb26af3 k8sPodName=openstack/keystone-bootstrap-sd5cs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24cbe1a485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24cbe1a485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24cbe1a485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=1241 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24cbe1a485 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=839 identity=1241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=24cbe1a485 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=839 identity=1241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=endpoint level=info msg="Successful endpoint creation" containerID=24cbe1a485 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=839 identity=1241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=24cbe1a485 endpointID=839 k8sNamespace=openstack k8sPodName=keystone-bootstrap-sd5cs subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=10435e67-bc14-42b7-9ad2-92dc35053bf7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=24cbe1a485 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=839 identity=1241 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/keystone-bootstrap-sd5cs subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 957a16c0-0a6c-4a88-b14f-8f8f86e6a0ed default }" containerID=a226e6b0abc1e1d6b9a163a1a6b2b6de65538222d1b11a40991c9a82907abbca datapathConfiguration="&{false false false false false }" interface=lxc5034e795d1d4 k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a226e6b0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a226e6b0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a226e6b0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a226e6b0ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3452 identity=3371 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a226e6b0ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3452 identity=3371 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a226e6b0ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3452 identity=3371 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=daemon level=info msg="Delete endpoint request" containerID=a226e6b0ab endpointID=3452 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a226e6b0ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3452 identity=3371 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-559381ae-f3a1-48b6-a362-e5efc6db8338 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 8a176cf5-a5ce-4ac6-a71e-cfdaf13c27be default }" containerID=5efffce2e1541a0ebcd7ca0c599cab0a171f2d5ae7dc47c52308babdf128c837 datapathConfiguration="&{false false false false false }" interface=lxc01679bc890d3 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5efffce2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5efffce2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=5efffce2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=9932 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5efffce2e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=9932 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5efffce2e1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=573 identity=9932 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5efffce2e1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=573 identity=9932 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.197 ebbc3ccf-c9e9-4d20-b847-18e12828217e default }" containerID=c3a5b9af5acf52fdddf6becb2d962875763d2a796e530be4432f0d8f252ffcfa datapathConfiguration="&{false false false false false }" interface=lxcd42537d43195 k8sPodName=openstack/barbican-db-init-765vm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3a5b9af5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3a5b9af5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3a5b9af5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=16355 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3a5b9af5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3748 identity=16355 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3a5b9af5a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3748 identity=16355 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3a5b9af5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3748 identity=16355 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.73 a329234b-cf4c-4287-a024-75b79641c7e9 default }" containerID=30ac79dbedbf4e477948ae6c0bc6229dbb225b8edb73c094008e29be7b7cde8a datapathConfiguration="&{false false false false false }" interface=lxc396b397db1fc k8sPodName=openstack/barbican-api-77d4db8976-ckzfg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30ac79dbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30ac79dbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30ac79dbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=21654 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30ac79dbed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=658 identity=21654 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30ac79dbed datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=658 identity=21654 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg subsys=endpoint level=info msg="Successful endpoint creation" containerID=30ac79dbed datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=658 identity=21654 ipv4=10.0.0.73 ipv6= k8sPodName=openstack/barbican-api-77d4db8976-ckzfg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c3a5b9af5a endpointID=3748 k8sNamespace=openstack k8sPodName=barbican-db-init-765vm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=b779b933-84fa-4cd2-8459-11f1b2179c90 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c3a5b9af5a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3748 identity=16355 ipv4=10.0.0.197 ipv6= k8sPodName=openstack/barbican-db-init-765vm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 15219852-3272-441e-9580-b32fcdb429a4 default }" containerID=da4867d726faf5a8ee899120492bc92fb9508dc8ce0611a61f3518d9eda5c92e datapathConfiguration="&{false false false false false }" interface=lxcdad45827374a k8sPodName=openstack/barbican-db-sync-dp2b2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da4867d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da4867d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da4867d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=21614 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da4867d726 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3118 identity=21614 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da4867d726 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3118 identity=21614 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da4867d726 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3118 identity=21614 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da4867d726 endpointID=3118 k8sNamespace=openstack k8sPodName=barbican-db-sync-dp2b2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=b5c2df68-ee52-48ff-b1d0-97fffd49c79c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=da4867d726 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3118 identity=21614 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/barbican-db-sync-dp2b2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 ada94c89-fc80-474b-bed4-9aab5ca55c90 default }" containerID=50c7f32d70f10b075147796fba281a1ff31e3bbba83e3812f1e14c12b81aff8a datapathConfiguration="&{false false false false false }" interface=lxc604b534b3fa3 k8sPodName=openstack/barbican-rabbit-init-s9d8w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=50c7f32d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=50c7f32d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=50c7f32d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=46911 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=50c7f32d70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=46911 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=50c7f32d70 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2609 identity=46911 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=endpoint level=info msg="Successful endpoint creation" containerID=50c7f32d70 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2609 identity=46911 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=50c7f32d70 endpointID=2609 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-s9d8w subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ba4f2d9e-7c6c-4778-b04a-912d828f6222 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=50c7f32d70 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2609 identity=46911 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/barbican-rabbit-init-s9d8w subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 b65e196a-10c8-4ea0-8d56-3a18fdc40fda default }" containerID=7ea7b9c439f6902f244939600e01c23839962ef18f5c8981cd91ebf75d3100e1 datapathConfiguration="&{false false false false false }" interface=lxcf57e03778db4 k8sPodName=openstack/barbican-ks-service-smctf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ea7b9c439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ea7b9c439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ea7b9c439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=5883 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ea7b9c439 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1543 identity=5883 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7ea7b9c439 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1543 identity=5883 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ea7b9c439 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1543 identity=5883 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ea7b9c439 endpointID=1543 k8sNamespace=openstack k8sPodName=barbican-ks-service-smctf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=6b75ed66-c79b-4988-b01c-3609aee92d87 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=7ea7b9c439 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1543 identity=5883 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/barbican-ks-service-smctf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 7c33836e-2afa-4441-8edf-8f19968a7ed1 default }" containerID=ac00ca924ce94dd0035eca498f292e3305702325bb4e6ae62493a4d63a2a8969 datapathConfiguration="&{false false false false false }" interface=lxca45daa05925a k8sPodName=openstack/barbican-ks-endpoints-ld2nq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=28501 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3122 identity=28501 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac00ca924c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3122 identity=28501 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac00ca924c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3122 identity=28501 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac00ca924c endpointID=3122 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-ld2nq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=2709d0a0-6a29-4b3b-8874-789f927221ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ac00ca924c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3122 identity=28501 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/barbican-ks-endpoints-ld2nq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 42272929-2993-4c21-a4f8-5c435d64e98e default }" containerID=a782a7b11d1930041b53f0c4ae86db11ad7c24a14c11834b270f94e3509b99eb datapathConfiguration="&{false false false false false }" interface=lxcae9bf49a5b7f k8sPodName=openstack/barbican-ks-user-kp7js labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=5050 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=274 identity=5050 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a782a7b11d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=274 identity=5050 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=endpoint level=info msg="Successful endpoint creation" containerID=a782a7b11d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=274 identity=5050 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a782a7b11d endpointID=274 k8sNamespace=openstack k8sPodName=barbican-ks-user-kp7js subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=28cefdf0-34ed-49fc-bb9b-bf6b5a605743 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a782a7b11d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=274 identity=5050 ipv4=10.0.0.234 ipv6= k8sPodName=openstack/barbican-ks-user-kp7js subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.226 12249e4f-f15e-434a-808f-a34e5b1bc4d6 default }" containerID=85d3ea3629c1c350da05466ca53666cb5ddd7128919b14fce370ecf178d69513 datapathConfiguration="&{false false false false false }" interface=lxc0fc97153cd15 k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85d3ea3629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85d3ea3629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.14.2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=85d3ea3629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=8389 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.14.2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85d3ea3629 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3596 identity=8389 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85d3ea3629 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3596 identity=8389 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm subsys=endpoint level=info msg="Successful endpoint creation" containerID=85d3ea3629 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3596 identity=8389 ipv4=10.0.0.226 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76c484c45f-48gzm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.103 b6722b04-ab91-46f2-b6d7-5f0e4191e8d1 default }" containerID=c27b8e1c76833abc98cf61287f0c1e447cec11ca8c1b5d96dc8c904a6e3258f9 datapathConfiguration="&{false false false false false }" interface=lxc552d42b2588e k8sPodName=openstack/rook-ceph-detect-version-x5sq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c27b8e1c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c27b8e1c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c27b8e1c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=26802 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c27b8e1c76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=123 identity=26802 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c27b8e1c76 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=123 identity=26802 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c27b8e1c76 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=123 identity=26802 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=daemon level=info msg="Delete endpoint request" containerID=c27b8e1c76 endpointID=123 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-x5sq4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=0ae3d3bd-2beb-4a26-8cbe-c24265a22ba3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=c27b8e1c76 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=123 identity=26802 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/rook-ceph-detect-version-x5sq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 c1baaf77-236e-4a90-b980-5e596c7d048f default }" containerID=92a6eb704f696ab6e57c4a31a2027f0f29610f45effe5fee1e3892fd8daac824 datapathConfiguration="&{false false false false false }" interface=lxc495d1ce2c2c0 k8sPodName=openstack/ceph-object-controller-detect-version-25b9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=92a6eb704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=92a6eb704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=92a6eb704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=57119 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=92a6eb704f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3897 identity=57119 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=92a6eb704f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3897 identity=57119 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=92a6eb704f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3897 identity=57119 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=daemon level=info msg="Delete endpoint request" containerID=92a6eb704f endpointID=3897 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-25b9t subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=bd6de58c-b5a7-4591-a6fe-1aee3b92453d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=92a6eb704f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3897 identity=57119 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-25b9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 aa090295-b4b8-4ee7-9622-fa0a8d9f590c default }" containerID=94d2f078cd438a608d7bdf86ebff259421243a45c415c460491daf0fd59ca5f1 datapathConfiguration="&{false false false false false }" interface=lxcbf86b33ac4db k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94d2f078cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94d2f078cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94d2f078cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=3371 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94d2f078cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3556 identity=3371 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=94d2f078cd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3556 identity=3371 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=endpoint level=info msg="Successful endpoint creation" containerID=94d2f078cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3556 identity=3371 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=daemon level=info msg="Delete endpoint request" containerID=94d2f078cd endpointID=3556 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=94d2f078cd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3556 identity=3371 ipv4=10.0.0.58 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9191ad35-1923-4929-944b-fa982e5a260d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.4 c40cb4da-2da5-4585-a726-1b2aec77b1ff default }" containerID=0309a8c7efa1de43b13cba7c5931aafe7224ee26b391aa59f6dec921be65005f datapathConfiguration="&{false false false false false }" interface=lxce264046c9a6e k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=8643 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=8643 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0309a8c7ef datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=152 identity=8643 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0309a8c7ef datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=152 identity=8643 ipv4=10.0.0.4 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.252 c1f5f31a-d6a3-4965-ab6d-76065e2c5f87 default }" containerID=11f2982f05a8b2465e42ed9cc4cc70c8e44ae8156ef83523b865b0bd2a4fa88f datapathConfiguration="&{false false false false false }" interface=lxc3f38fec883e8 k8sPodName=openstack/glance-db-init-9cg2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3ecb1907-6966-4f88-a810-80806198ce95,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3ecb1907-6966-4f88-a810-80806198ce95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3ecb1907-6966-4f88-a810-80806198ce95;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=3ecb1907-6966-4f88-a810-80806198ce95;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=8568 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3ecb1907-6966-4f88-a810-80806198ce95,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=3ecb1907-6966-4f88-a810-80806198ce95,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=461 identity=8568 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11f2982f05 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=461 identity=8568 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=11f2982f05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=461 identity=8568 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=11f2982f05 endpointID=461 k8sNamespace=openstack k8sPodName=glance-db-init-9cg2v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3ecb1907-6966-4f88-a810-80806198ce95 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=3ecb1907-6966-4f88-a810-80806198ce95 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=11f2982f05 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=461 identity=8568 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-db-init-9cg2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 dcbf52f8-5864-43e1-ae1b-094df72aecfd default }" containerID=382649954af17f12be0abd198a4540962942d12f1c4ab1c6f63050e27fa5403d datapathConfiguration="&{false false false false false }" interface=lxcb73e837d98d1 k8sPodName=openstack/glance-db-sync-fwn4m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=382649954a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=382649954a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=382649954a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=8043 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=382649954a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=43 identity=8043 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=382649954a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=43 identity=8043 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=endpoint level=info msg="Successful endpoint creation" containerID=382649954a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=8043 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=382649954a endpointID=43 k8sNamespace=openstack k8sPodName=glance-db-sync-fwn4m subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=3da25f82-6e77-463d-ac6a-59bc5ab730ea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=382649954a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=43 identity=8043 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/glance-db-sync-fwn4m subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 657ee362-1ad7-4b27-89cc-1b9110ac9c35 default }" containerID=8488cc4b1b2f8b36559d684a187d1c97d0713a6de5e6204b4106aa456c081f3e datapathConfiguration="&{false false false false false }" interface=lxc09b23990b19e k8sPodName=openstack/glance-rabbit-init-765pf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=12649 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1724 identity=12649 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8488cc4b1b datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1724 identity=12649 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=endpoint level=info msg="Successful endpoint creation" containerID=8488cc4b1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1724 identity=12649 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 003628fd-52fb-40dd-b45e-3be77bdbe82a default }" containerID=c6ab1ce04ee6a5f01dd2d15c4965f136b80b0599a136b32ad64be1cce7e653d3 datapathConfiguration="&{false false false false false }" interface=lxc7f410d5590ed k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c6ab1ce04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c6ab1ce04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c6ab1ce04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=9885 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c6ab1ce04e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2609 identity=9885 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 0a43e112-6572-448c-ad8b-06028982e5f6 default }" containerID=9d30096378d9f0c95d31ca0c3874370060abcf25e28325f45bd4152db3b04e1d datapathConfiguration="&{false false false false false }" interface=lxcd672fe72cd69 k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9d30096378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d30096378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d30096378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=20486 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d30096378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1179 identity=20486 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c6ab1ce04e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2609 identity=9885 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c6ab1ce04e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2609 identity=9885 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-cf9f85b9f-nm8dw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9d30096378 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1179 identity=20486 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d30096378 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1179 identity=20486 ipv4=10.0.0.34 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-7c8df6f89b-lg7m4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8488cc4b1b endpointID=1724 k8sNamespace=openstack k8sPodName=glance-rabbit-init-765pf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=bf53fd7f-ac54-4eac-898a-89b07976403b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Removed endpoint" containerID=8488cc4b1b datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1724 identity=12649 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/glance-rabbit-init-765pf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.24 2c15325d-3d3c-45de-918d-38c08755c75e default }" containerID=41a06256b1c671d3cbda7677c4d2b7ebcec15d44a810377e19d8201a802d7335 datapathConfiguration="&{false false false false false }" interface=lxc4327e03aa1be k8sPodName=openstack/glance-ks-service-qzs6c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41a06256b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41a06256b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41a06256b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=31016 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41a06256b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=31016 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41a06256b1 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=540 identity=31016 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=endpoint level=info msg="Successful endpoint creation" containerID=41a06256b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=540 identity=31016 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41a06256b1 endpointID=540 k8sNamespace=openstack k8sPodName=glance-ks-service-qzs6c subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=42edb0f9-c47d-4ea5-8aae-469075a9cfef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=41a06256b1 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=540 identity=31016 ipv4=10.0.0.24 ipv6= k8sPodName=openstack/glance-ks-service-qzs6c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 f47d046f-8f6e-4f92-a1bf-e75781972c4a default }" containerID=207bc6050c8ac00b78796acb3e5bfe857db05536f8e78533038fa5078c13d502 datapathConfiguration="&{false false false false false }" interface=lxca5c82f36d443 k8sPodName=openstack/glance-ks-endpoints-f88zf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=207bc6050c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=207bc6050c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=207bc6050c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=26445 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=207bc6050c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=26445 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=207bc6050c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3881 identity=26445 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=endpoint level=info msg="Successful endpoint creation" containerID=207bc6050c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3881 identity=26445 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.87 5b11a8d4-e792-4395-a06c-ee2b93b019e3 default }" containerID=101eff51576f714ceec50f4d753fab727667bd543bee6cc72b7cf85ac61e919b datapathConfiguration="&{false false false false false }" interface=lxc4111d7dcb184 k8sPodName=openstack/ceph-object-controller-detect-version-l9gws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.14.2;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=3147 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.14.2" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=3147 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=101eff5157 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1063 identity=3147 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=endpoint level=info msg="Successful endpoint creation" containerID=101eff5157 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1063 identity=3147 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=101eff5157 endpointID=1063 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-l9gws subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=de3e67f0-6332-4eae-a240-8111dc34050b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.14.2]" subsys=allocator level=info msg="Removed endpoint" containerID=101eff5157 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1063 identity=3147 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-l9gws subsys=endpoint level=info msg="Delete endpoint request" containerID=207bc6050c endpointID=3881 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-f88zf subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=7e4c6989-8a73-4a5f-b677-f9590a3c9cf5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=207bc6050c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3881 identity=26445 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-ks-endpoints-f88zf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 5fce61f0-31c1-42b5-ada6-c95eb39027c7 default }" containerID=e7c2baf6286d0545eb7b4c255d007f567f5ee0b283966806541d0bd3683c6321 datapathConfiguration="&{false false false false false }" interface=lxcfc6ffaa419f9 k8sPodName=openstack/glance-ks-user-hgnx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=13488 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=734 identity=13488 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7c2baf628 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=734 identity=13488 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7c2baf628 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=734 identity=13488 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e7c2baf628 endpointID=734 k8sNamespace=openstack k8sPodName=glance-ks-user-hgnx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=30a7f39c-4c3c-4b20-8fe7-e4be24fc734b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e7c2baf628 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=734 identity=13488 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-user-hgnx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.58 f29f10de-fecd-4495-93c2-0577f6185fd4 default }" containerID=63b0b18a4caf46162c219f9b3e719ab36db92d2782fd5ddd084484c7560117a0 datapathConfiguration="&{false false false false false }" interface=lxcecc53fd7b8ce k8sPodName=openstack/glance-metadefs-load-tl8t2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63b0b18a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63b0b18a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63b0b18a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=5305 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63b0b18a4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1839 identity=5305 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=63b0b18a4c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1839 identity=5305 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=63b0b18a4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1839 identity=5305 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63b0b18a4c endpointID=1839 k8sNamespace=openstack k8sPodName=glance-metadefs-load-tl8t2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=82f31ccf-4f8b-488e-b5a0-303c0c295e6c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=63b0b18a4c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1839 identity=5305 ipv4=10.0.0.58 ipv6= k8sPodName=openstack/glance-metadefs-load-tl8t2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.149 554035b8-25ff-4545-ab00-7f14d5df9b1e default }" containerID=bc376ff61f1002836b2a39d1499768e08c06d3c35e9dbdf5645e8ac359a4620a datapathConfiguration="&{false false false false false }" interface=lxcb7c9647475cc k8sPodName=openstack/glance-storage-init-ppwxd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bc376ff61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bc376ff61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bc376ff61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=2749 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bc376ff61f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2109 identity=2749 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bc376ff61f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2109 identity=2749 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=endpoint level=info msg="Successful endpoint creation" containerID=bc376ff61f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2109 identity=2749 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bc376ff61f endpointID=2109 k8sNamespace=openstack k8sPodName=glance-storage-init-ppwxd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0cbee486-f123-41b4-ac4a-ca36ede26d69 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=bc376ff61f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2109 identity=2749 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/glance-storage-init-ppwxd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 e93ea800-8d4b-4f14-9ff0-b380044c3339 default }" containerID=aa6f7455e5c724c02aab6a7e069136a569527795fea93ebbb9aaf79ca56efd75 datapathConfiguration="&{false false false false false }" interface=lxc3d561eff41dd k8sPodName=openstack/glance-api-695c86d8d5-f5t5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aa6f7455e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aa6f7455e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=aa6f7455e5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=12061 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aa6f7455e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1444 identity=12061 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aa6f7455e5 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1444 identity=12061 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=aa6f7455e5 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1444 identity=12061 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/glance-api-695c86d8d5-f5t5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.117 88eb5b5e-7bf7-4b9c-9f75-473c7689cba6 default }" containerID=2236d1556317f13b8fa7f1f5c02af37de468342d94e8b552af1b5c278f3b5e0e datapathConfiguration="&{false false false false false }" interface=lxc11e10858862c k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.90 4d55e2a9-8f0b-496d-87c5-cebc9c08215b default }" containerID=579766aec7096a2d1e8fbe479e20d888e95f85dc4287cdad2bb75eb46ad61fd2 datapathConfiguration="&{false false false false false }" interface=lxcd4039053779e k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=34770 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1087 identity=34770 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk subsys=endpoint level=info msg="Invalid state transition skipped" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=12744 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1420 identity=12744 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 49532f96-59b7-4ada-9ed7-b17f4fcedec8 default }" containerID=af23d17d07c35e1da6e3e8b1b8deb105eded51739ed3ecd379839a0b6b127a70 datapathConfiguration="&{false false false false false }" interface=lxc32a3c6461240 k8sPodName=openstack/staffeln-db-init-h9j7v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af23d17d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af23d17d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af23d17d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=57054 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af23d17d07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3881 identity=57054 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2236d15563 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1087 identity=34770 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=2236d15563 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1087 identity=34770 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/staffeln-conductor-5447555f66-zfmfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=579766aec7 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1420 identity=12744 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb subsys=endpoint level=info msg="Successful endpoint creation" containerID=579766aec7 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1420 identity=12744 ipv4=10.0.0.90 ipv6= k8sPodName=openstack/staffeln-api-6bcb8d8fb5-hwmwb subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=af23d17d07 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3881 identity=57054 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=endpoint level=info msg="Successful endpoint creation" containerID=af23d17d07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3881 identity=57054 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af23d17d07 endpointID=3881 k8sNamespace=openstack k8sPodName=staffeln-db-init-h9j7v subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=4cb79421-a7e4-4ba6-b872-4899066345b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=af23d17d07 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3881 identity=57054 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/staffeln-db-init-h9j7v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 c60f6025-0f29-466c-b0ff-0b64aa9a523e default }" containerID=308517fa54a1d519b7f601fa6c565dafe216084e4ab794956c68f995d9175dbb datapathConfiguration="&{false false false false false }" interface=lxc04183a289220 k8sPodName=openstack/staffeln-db-sync-pvxqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=46161 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=4abeb7fd-02c3-482a-a1b6-0de58619a174,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=540 identity=46161 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=308517fa54 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=540 identity=46161 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=308517fa54 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=540 identity=46161 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/staffeln-db-sync-pvxqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager