level=info msg="Memory available for map entries (0.003% of 16764952576B): 41912381B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147060" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.634563ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="83.3µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.867575ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="27.14µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=162.959694ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="22.66µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="151.991µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="205.041µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="205.811µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="191.64µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="753.022µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.08µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.057224ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=10.052479ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="51.54µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="199.801µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="396.701µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="208.881µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="240.65µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=49.542223ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="87.371µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="14.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.48µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.241.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.945199ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="12.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=102.050054ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.56µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.7762ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.27µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.86µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.45µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.79µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.23µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="68.23µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="310.291µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="2.87µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.86µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="182.902µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="509.881µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="878.602µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.11µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="16.5µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.241 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.241 ipAddr.ipv6="" k8sNodeIP=162.253.55.241 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.241" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.42" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.241" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.241} {CiliumInternalIP 10.0.0.42}] 10.0.0.0/24 [] [] 10.0.0.93 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:42267" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.4436028s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="88.911µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="143.101µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="58.11µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="16.87µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3354 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.483401158s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 8bf89abf-097a-4d39-a8c9-c86c7c60c2bf default }" containerID=8dec8fd46377a0c7a53960ac232069a626319fb46876476e869dc298eb201ef3 datapathConfiguration="&{false false false false false }" interface=lxc88e6694ce5b7 k8sPodName=kube-system/coredns-7c96b6546b-rvcbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 b7ca7630-34c6-4ab7-8dd0-2bcd9db8af70 default }" containerID=b7382253cd66931530a2bdb0680a6c7f41977e209298c63ce311fb1121519a20 datapathConfiguration="&{false false false false false }" interface=lxc390d170f2d65 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=21187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=21187 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identity=684 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2100 identity=684 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=344.243578ms file-path=/var/run/cilium/state/templates/2c93a4b547061fda5d1a3ff29a5d70f3ba98962376e93b55f579b61a29b22920/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3354 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 ipv4=10.0.0.93 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identityLabels="reserved:health" ipv4=10.0.0.93 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=158 identity=4 identityLabels="reserved:health" ipv4=10.0.0.93 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.099046726s file-path=/var/run/cilium/state/templates/674dc8bd0e0b93459c8f03ab6b019490a644874782114eef6c80d9450077e142/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=8dec8fd463 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3041 identity=21187 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8dec8fd463 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3041 identity=21187 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b7382253cd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2100 identity=684 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7382253cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2100 identity=684 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=158 identity=4 ipv4=10.0.0.93 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b7382253cd endpointID=2100 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-zj4bp subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=47ba0796-7351-44a4-b21c-c955159d7d71 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=b7382253cd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2100 identity=684 ipv4=10.0.0.232 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-zj4bp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 13827652-4363-4a85-8ce1-c5a52d1b5492 default }" containerID=649b109207d4a22a664a0c8d2d92f70940e6f94e090b9f234426470c2432dc03 datapathConfiguration="&{false false false false false }" interface=lxccb3338ba6863 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=21361 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4053 identity=21361 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=649b109207 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4053 identity=21361 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=649b109207 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4053 identity=21361 ipv4=10.0.0.63 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxn8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3354 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_03354 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_03354 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_03354 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_03354:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3354 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.186 ebb85554-7bff-49e7-bddd-08efb7874069 default }" containerID=6c77871657c4069be2efcb9da61a1d6763c4c4416f29c2a167620b0fe43ec425 datapathConfiguration="&{false false false false false }" interface=lxcce2ccfeef772 k8sPodName=kube-system/coredns-67659f764b-7g4jk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c77871657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6c77871657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6c77871657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=21187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c77871657 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=348 identity=21187 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.254 9ea7dcbf-7264-4ead-924d-f299bb08ad4f default }" containerID=73e5b75d3440ebef17d397f6346283f503e943789585c9a804db3fd56fd6a432 datapathConfiguration="&{false false false false false }" interface=lxcfd01a04efbc0 k8sPodName=kube-system/coredns-67659f764b-bj7dk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73e5b75d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73e5b75d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk subsys=endpoint level=info msg="Identity of endpoint changed" containerID=73e5b75d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=21187 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73e5b75d34 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=21187 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c77871657 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=348 identity=21187 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c77871657 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=348 identity=21187 ipv4=10.0.0.186 ipv6= k8sPodName=kube-system/coredns-67659f764b-7g4jk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73e5b75d34 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1276 identity=21187 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk subsys=endpoint level=info msg="Successful endpoint creation" containerID=73e5b75d34 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=21187 ipv4=10.0.0.254 ipv6= k8sPodName=kube-system/coredns-67659f764b-bj7dk subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 0fb65565-ec0b-4069-9ba7-5bcaa463db12 default }" containerID=e57d82aaf7d7db9ed5e0c54bc4e971d8a556780192e3628626e6a175cd6c2145 datapathConfiguration="&{false false false false false }" interface=lxc603c94731c48 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e57d82aaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e57d82aaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e57d82aaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=47240 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e57d82aaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1202 identity=47240 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e57d82aaf7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1202 identity=47240 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j subsys=endpoint level=info msg="Successful endpoint creation" containerID=e57d82aaf7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1202 identity=47240 ipv4=10.0.0.3 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-85x8j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8dec8fd463 endpointID=3041 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-rvcbm subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=8dec8fd463 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3041 identity=21187 ipv4=10.0.0.38 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-rvcbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 15b534b3-48cc-4644-a92b-40164c44d3be default }" containerID=d5994d4574305af472c2d8bb795068b65aed3198a04f6c2652457a272f97c2c5 datapathConfiguration="&{false false false false false }" interface=lxc2a5df895ff7d k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=55344 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=388 identity=55344 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.239 34ad057a-22b0-4eaa-969f-4ad01ad0dc51 default }" containerID=81d1c0151560f38e9172d88deeacb84a5427366aaf5b0f65f6caf31753388f4b datapathConfiguration="&{false false false false false }" interface=lxc170914fc111f k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=81d1c01515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=81d1c01515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=81d1c01515 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=518 identity=16057 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=81d1c01515 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=518 identity=16057 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 a4d3c8a0-1958-46bc-862f-21cb0fa5a1ca default }" containerID=93f6e835d4c22b50d9d903fccf12e930a462927bfb10c40792c20580afc13dda datapathConfiguration="&{false false false false false }" interface=lxc1aab71451319 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=93f6e835d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=93f6e835d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=93f6e835d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identity=19429 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=93f6e835d4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2101 identity=19429 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d5994d4574 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=388 identity=55344 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5994d4574 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=388 identity=55344 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-zvh99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=81d1c01515 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=518 identity=16057 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl subsys=endpoint level=info msg="Successful endpoint creation" containerID=81d1c01515 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=518 identity=16057 ipv4=10.0.0.239 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-qvnfl subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=93f6e835d4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2101 identity=19429 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=93f6e835d4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2101 identity=19429 ipv4=10.0.0.9 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-xsxrc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.138 b704ad8c-5fca-40ec-ada4-ac6300b1690e default }" containerID=36e2b706158179807e8a31cc619a9c1138f8b31c2ab036d2bdf860a67b939ca0 datapathConfiguration="&{false false false false false }" interface=lxc13e6d65b00cb k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=36e2b70615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=36e2b70615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=36e2b70615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=331 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=36e2b70615 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=674 identity=331 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=36e2b70615 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=674 identity=331 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=36e2b70615 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=674 identity=331 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=36e2b70615 endpointID=674 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-c2mr9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=e75bebb8-141a-411d-86b4-39cb3f88b92c k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=36e2b70615 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=674 identity=331 ipv4=10.0.0.138 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-c2mr9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 4598b032-7f57-442d-ae2b-1b5d05ca41d9 default }" containerID=d84f385c469ea4cc0c4c8908e15953e02806f75d93de4f7abb4127feb6202484 datapathConfiguration="&{false false false false false }" interface=lxca968d673a64e k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d84f385c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d84f385c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b033733a-1195-454a-98bb-4e418bb776b9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b033733a-1195-454a-98bb-4e418bb776b9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=b033733a-1195-454a-98bb-4e418bb776b9;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=b033733a-1195-454a-98bb-4e418bb776b9;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d84f385c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=3770 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=b033733a-1195-454a-98bb-4e418bb776b9,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=b033733a-1195-454a-98bb-4e418bb776b9,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d84f385c46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3521 identity=3770 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d84f385c46 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3521 identity=3770 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d84f385c46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3521 identity=3770 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d84f385c46 endpointID=3521 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-tq4p2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=b033733a-1195-454a-98bb-4e418bb776b9 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=b033733a-1195-454a-98bb-4e418bb776b9 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=d84f385c46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3521 identity=3770 ipv4=10.0.0.232 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-tq4p2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 4a3e580e-0d71-4141-99e7-833f8ca67165 default }" containerID=31d3b0b268f072c6139f6676b47632e60e5a3c4b06c22f59312bf25545a2330f datapathConfiguration="&{false false false false false }" interface=lxc15fb92920a92 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31d3b0b268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31d3b0b268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=31d3b0b268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=42648 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=31d3b0b268 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=42648 ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31d3b0b268 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=292 identity=42648 ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb subsys=endpoint level=info msg="Successful endpoint creation" containerID=31d3b0b268 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=292 identity=42648 ipv4=10.0.0.61 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-xhslb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.132 69d13dc2-2e7d-4e09-9c05-78179bbd44ae default }" containerID=68375e8edbe761e1bf633a158787fba30e435f22358a89b96a63285dc775d99c datapathConfiguration="&{false false false false false }" interface=lxc355deebd8be7 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=68375e8edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=68375e8edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3f394d31-7902-4214-b420-7d608125768f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3f394d31-7902-4214-b420-7d608125768f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=3f394d31-7902-4214-b420-7d608125768f;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=3f394d31-7902-4214-b420-7d608125768f;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=68375e8edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=31728 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=3f394d31-7902-4214-b420-7d608125768f,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=3f394d31-7902-4214-b420-7d608125768f,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=68375e8edb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=31728 ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=68375e8edb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=663 identity=31728 ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=endpoint level=info msg="Successful endpoint creation" containerID=68375e8edb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=663 identity=31728 ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=68375e8edb endpointID=663 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-vm8wm subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=3f394d31-7902-4214-b420-7d608125768f k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=3f394d31-7902-4214-b420-7d608125768f k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=68375e8edb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=663 identity=31728 ipv4=10.0.0.132 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-vm8wm subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=350d85c3-affd-403c-84d4-31837ea66771] Description:}]" policyAddRequest=a87db22d-a219-4fa1-a0fa-b7255d3fd8d6 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a87db22d-a219-4fa1-a0fa-b7255d3fd8d6 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=04794233-1531-4a31-a9c6-69aaa1fdbea3] Description:}]" policyAddRequest=bda79c36-9018-46b8-8868-3fddf115a47a subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=bda79c36-9018-46b8-8868-3fddf115a47a policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.244 77ddfc20-711f-4da4-b81d-f1e6665ebdf7 default }" containerID=15adf4dca0e3d93f9aeb1af6268603b1cc81a1ced07ad309d6cd098521f6c570 datapathConfiguration="&{false false false false false }" interface=lxca22286293748 k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=39409 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=570 identity=39409 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15adf4dca0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=570 identity=39409 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=15adf4dca0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=570 identity=39409 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-qwj6z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.55 60af552a-07d4-43cc-a3fb-0282f8863a71 default }" containerID=6e7bcc3030ed8882aa4c4db55391a9b3fb258da3ad86dea58c9a78044cb2cfbc datapathConfiguration="&{false false false false false }" interface=lxc1393f8b5e073 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e7bcc3030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e7bcc3030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e7bcc3030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identity=33329 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e7bcc3030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2140 identity=33329 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6e7bcc3030 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2140 identity=33329 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e7bcc3030 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2140 identity=33329 ipv4=10.0.0.55 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-w8nn9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 73b52c85-a402-4786-bf02-82ce374faf69 default }" containerID=5ddcc9a115a96fb6382e7e7959501efdbf033b4846da166a9de11969d20261e6 datapathConfiguration="&{false false false false false }" interface=lxc880bc9c72cc7 k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=6672 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=414 identity=6672 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ddcc9a115 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=414 identity=6672 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ddcc9a115 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=414 identity=6672 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-dq6ff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.161 f36f2126-8370-4d21-ac30-69d94fef6e69 default }" containerID=e794e66dd3f31de6c551d631f5adc5b3ee1d782db02d4cb9357e2470dae7cce3 datapathConfiguration="&{false false false false false }" interface=lxcd7c4418971f8 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identity=20606 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3331 identity=20606 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e794e66dd3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3331 identity=20606 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e794e66dd3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3331 identity=20606 ipv4=10.0.0.161 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.78 71a04da9-c0a4-4aa0-8593-5cf4a5b86198 default }" containerID=65f8d02e688b73535d7eaead3a7fbe03fbe5eb4ff09b812e8745dda821708a66 datapathConfiguration="&{false false false false false }" interface=lxc71981350804c k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65f8d02e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65f8d02e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65f8d02e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=17583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65f8d02e68 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2251 identity=17583 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=65f8d02e68 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2251 identity=17583 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65f8d02e68 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2251 identity=17583 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=65f8d02e68 endpointID=2251 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=65f8d02e68 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2251 identity=17583 ipv4=10.0.0.78 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d943a2b6-5e50-48ad-876e-0f8349cfe219 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 821fd367-7540-439f-ac45-2ab49ed014cc default }" containerID=1847f37302ea6eb6a57d9921640b4c0871807a77f3a29153d46ce39a79689b11 datapathConfiguration="&{false false false false false }" interface=lxcad6417630626 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=4141 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=279 identity=4141 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1847f37302 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=279 identity=4141 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1847f37302 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=279 identity=4141 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 962ae2ef-77d3-4ecf-bcdf-1795ca0cba06 default }" containerID=15c55e8ac4e97ff752cec08a9c52bde9ee15f5aae6e86dab65096fc7d4753a90 datapathConfiguration="&{false false false false false }" interface=lxcfa15f29e745c k8sPodName=openstack/memcached-memcached-6479589586-2t7fb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=33721 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=33721 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15c55e8ac4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=639 identity=33721 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb subsys=endpoint level=info msg="Successful endpoint creation" containerID=15c55e8ac4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=639 identity=33721 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-2t7fb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=16b3eab6-08eb-478b-9e0d-f51caeb31f3d] Description:}]" policyAddRequest=58f608d1-25f3-47e9-aa4b-99e60d2addfd subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=58f608d1-25f3-47e9-aa4b-99e60d2addfd policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.252 5a0aafa2-00b1-417f-aef9-a64782b66e41 default }" containerID=40c54aacac9f92f7191a4f137ef952e52488554f1621e40728c0ac53aa2d3fdc datapathConfiguration="&{false false false false false }" interface=lxc523a1a180f29 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=47538 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=502 identity=47538 ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40c54aacac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=502 identity=47538 ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40c54aacac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=502 identity=47538 ipv4=10.0.0.252 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04035087719298246 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.69 1aa5591e-b3fa-4ae6-b6cf-51a0451f41d4 default }" containerID=c3eab5d71d7d365028082779a1d5e4c6836fab3e1c94ae64fbbe37e0967f5b00 datapathConfiguration="&{false false false false false }" interface=lxc900d6f17f114 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=46993 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=46993 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3eab5d71d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3303 identity=46993 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3eab5d71d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3303 identity=46993 ipv4=10.0.0.69 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-k28kh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.148 82db38c9-5df6-4deb-9576-6ee273cd8de9 default }" containerID=47365c0d4e40720a286fa23b0285d76655988d471efe689238bda5e67959b3ea datapathConfiguration="&{false false false false false }" interface=lxc7eef6602faad k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=47365c0d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=47365c0d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=47365c0d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=836 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=47365c0d4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=440 identity=836 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=47365c0d4e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=440 identity=836 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=endpoint level=info msg="Successful endpoint creation" containerID=47365c0d4e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=440 identity=836 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=daemon level=info msg="Delete endpoint request" containerID=47365c0d4e endpointID=440 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-5x8sz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=efd98c62-5cf4-4b39-ba76-3a3bc56ba673 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=47365c0d4e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=440 identity=836 ipv4=10.0.0.148 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-5x8sz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 f12a5239-2fdc-4e57-9344-c22e8ea029b7 default }" containerID=75df4800304bc5f92e12fabd2c692286ec7f3085b1784c7c24c0bc51b25f7409 datapathConfiguration="&{false false false false false }" interface=lxca3e9a5a6b1a8 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=75df480030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=75df480030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=75df480030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=14773 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=75df480030 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=87 identity=14773 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 00ac7b5b-cc9a-4eca-9ed9-3ddf47a02e45 default }" containerID=08fcf287a8397631e9ffaa54eac917710e18856bb8d061d89f5a4b1af9fc03be datapathConfiguration="&{false false false false false }" interface=lxc0e00fd8fb003 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=08fcf287a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=08fcf287a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=08fcf287a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=3196 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=08fcf287a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=338 identity=3196 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=75df480030 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=87 identity=14773 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc subsys=endpoint level=info msg="Successful endpoint creation" containerID=75df480030 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=87 identity=14773 ipv4=10.0.0.62 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-srxqc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=08fcf287a8 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=338 identity=3196 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf subsys=endpoint level=info msg="Successful endpoint creation" containerID=08fcf287a8 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=338 identity=3196 ipv4=10.0.0.105 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-czrnf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.199 6fe42c5d-58c7-46b4-9724-ad8a6ee36103 default }" containerID=98d5f2d30f836f617458350ebff313b7248be48a1cf4fba269ea41c5b04cce81 datapathConfiguration="&{false false false false false }" interface=lxca03a67a249a0 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98d5f2d30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98d5f2d30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ef6665da-bb26-4146-971a-3b5306e64848,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ef6665da-bb26-4146-971a-3b5306e64848,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=ef6665da-bb26-4146-971a-3b5306e64848;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=ef6665da-bb26-4146-971a-3b5306e64848;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98d5f2d30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=14108 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=ef6665da-bb26-4146-971a-3b5306e64848,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=ef6665da-bb26-4146-971a-3b5306e64848,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=98d5f2d30f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=14108 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98d5f2d30f datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=63 identity=14108 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98d5f2d30f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=63 identity=14108 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.183 7c86ce0b-d63f-48bc-8f65-b83dd312078f default }" containerID=fa5f0aa844d7d520ec7a47251d8480c06c7067cd11dd1fce17b1ba7a8fddf42c datapathConfiguration="&{false false false false false }" interface=lxc243c8a395d24 k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fa5f0aa844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa5f0aa844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa5f0aa844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=10525 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa5f0aa844 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1016 identity=10525 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fa5f0aa844 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1016 identity=10525 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa5f0aa844 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1016 identity=10525 ipv4=10.0.0.183 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-659b46dc75-xqk7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.177 81b25da7-2a9a-4b56-98a2-f50f748afb3b default }" containerID=905969c912421d60d8d88650a60a5488374aa29345718bcb12b0ed4121fd7323 datapathConfiguration="&{false false false false false }" interface=lxc8b6492475ac2 k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=905969c912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=905969c912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=905969c912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=17583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=905969c912 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=17583 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=905969c912 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=594 identity=17583 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=905969c912 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=594 identity=17583 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.249 f5436dcb-e377-4146-9879-9ba69fde465a default }" containerID=257b79da3e272b07bc0a02160d11f4b7028da26826dadb919855c67d1e86bc17 datapathConfiguration="&{false false false false false }" interface=lxc5507bbb07e68 k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=257b79da3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=257b79da3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=257b79da3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=17583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=257b79da3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1708 identity=17583 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=endpoint level=info msg="Delete endpoint request" containerID=98d5f2d30f endpointID=63 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-g5r97 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=ef6665da-bb26-4146-971a-3b5306e64848 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=ef6665da-bb26-4146-971a-3b5306e64848 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=98d5f2d30f datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=63 identity=14108 ipv4=10.0.0.199 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g5r97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=257b79da3e datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1708 identity=17583 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=257b79da3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1708 identity=17583 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=daemon level=info msg="Delete endpoint request" containerID=905969c912 endpointID=594 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=257b79da3e endpointID=1708 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=905969c912 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=594 identity=17583 ipv4=10.0.0.177 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-61847633-02e8-4185-9350-a69c472b54d7 subsys=endpoint level=info msg="Removed endpoint" containerID=257b79da3e datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1708 identity=17583 ipv4=10.0.0.249 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-df8e5d70-278f-4d23-b3e2-c12654e07a79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 8bc86293-6b9c-4cc1-98da-7e3b12f63167 default }" containerID=0922809dcd07d77ca9ac4472142eb99d1c94fd03730d14180d0582aa6a4821b9 datapathConfiguration="&{false false false false false }" interface=lxcd8bac17a1ac3 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0922809dcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0922809dcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=0922809dcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=10826 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0922809dcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2073 identity=10826 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0922809dcd datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2073 identity=10826 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0922809dcd datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2073 identity=10826 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.13 137b5ca4-97d3-44c4-8d4a-db0a322d1873 default }" containerID=de944e3a51450b2216300c3ec4d88a9d7057959449b4271550a8200924d3d08e datapathConfiguration="&{false false false false false }" interface=lxcd87cb28268df k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de944e3a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de944e3a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de944e3a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=47149 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de944e3a51 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=47149 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de944e3a51 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3115 identity=47149 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=de944e3a51 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3115 identity=47149 ipv4=10.0.0.13 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.18 79a9193b-74e3-40c0-8821-bb5e91a3512d default }" containerID=a530c1fc59ff09de4ed862ed418fe48daa1e163349c991b466bdff205ee28a4c datapathConfiguration="&{false false false false false }" interface=lxc944600e4e755 k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a530c1fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a530c1fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a530c1fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=17583 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a530c1fc59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=114 identity=17583 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a530c1fc59 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=114 identity=17583 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=endpoint level=info msg="Successful endpoint creation" containerID=a530c1fc59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=114 identity=17583 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=daemon level=info msg="Delete endpoint request" containerID=a530c1fc59 endpointID=114 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=a530c1fc59 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=114 identity=17583 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5aae88f4-0d9f-4bcb-b445-46fdb520294d subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 4b9cd593-deae-4b23-9f16-2f7ccc503fef default }" containerID=ad90abb1785cdecef0650e1c5b37b3cf752308bca875a39a742beb36a248e4fe datapathConfiguration="&{false false false false false }" interface=lxcac96aff77f03 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad90abb178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad90abb178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad90abb178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=12950 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ad90abb178 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=202 identity=12950 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ad90abb178 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=202 identity=12950 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad90abb178 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=202 identity=12950 ipv4=10.0.0.45 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.96 65240ab9-4154-467d-89c8-8bbbf68dc492 default }" containerID=c0787d0e169e7f89e13415a93a3530c2cb591d715d6a5e2a83f124a4a4e25294 datapathConfiguration="&{false false false false false }" interface=lxc604fa31abbea k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c0787d0e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c0787d0e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c0787d0e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=11171 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c0787d0e16 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=508 identity=11171 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 421f4ddd-ef62-4846-bc72-a6a3b14e5a9c default }" containerID=73968d90cbb0428985760a09f00ecf94dcc5d328fa0e8bef8dac0f0aeb331f73 datapathConfiguration="&{false false false false false }" interface=lxcf5388e28a395 k8sPodName=openstack/keystone-credential-setup-6fxft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73968d90cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73968d90cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73968d90cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=2761 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73968d90cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=76 identity=2761 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c0787d0e16 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=508 identity=11171 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c0787d0e16 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=508 identity=11171 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/keystone-api-8dc5c69c7-fq262 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=73968d90cb datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=76 identity=2761 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=endpoint level=info msg="Successful endpoint creation" containerID=73968d90cb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=2761 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=73968d90cb endpointID=76 k8sNamespace=openstack k8sPodName=keystone-credential-setup-6fxft subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=3bbce1fb-fee5-45ac-844d-06a9a31242f4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=73968d90cb datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=76 identity=2761 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-credential-setup-6fxft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.47 604ed161-4caa-4dd1-9032-561254a8d5a0 default }" containerID=c57709ee7d3406748193cfdcdff70afb62b391020809057603a386a2d29eccb9 datapathConfiguration="&{false false false false false }" interface=lxcd14eaa4afe83 k8sPodName=openstack/keystone-db-init-gfr4z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c57709ee7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c57709ee7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c57709ee7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=34212 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c57709ee7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3027 identity=34212 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c57709ee7d datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3027 identity=34212 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=endpoint level=info msg="Successful endpoint creation" containerID=c57709ee7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3027 identity=34212 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c57709ee7d endpointID=3027 k8sNamespace=openstack k8sPodName=keystone-db-init-gfr4z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=f84f935d-b8ee-431e-a594-48801f42ae73 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c57709ee7d datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3027 identity=34212 ipv4=10.0.0.47 ipv6= k8sPodName=openstack/keystone-db-init-gfr4z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 66938fb0-5877-437f-a174-b4e68c1df3a1 default }" containerID=b423798c0cb55c5c56f158e783492d8d641e0c73d6e7b025ffcd97dbfa43e319 datapathConfiguration="&{false false false false false }" interface=lxc28d0b7fb74fd k8sPodName=openstack/keystone-fernet-setup-77frb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b423798c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b423798c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b423798c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=7358 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b423798c0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2787 identity=7358 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b423798c0c datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2787 identity=7358 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b423798c0c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2787 identity=7358 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=daemon level=info msg="Delete endpoint request" containerID=b423798c0c endpointID=2787 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-77frb subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=0678f2e4-d5c4-4858-a8a3-82c90091d88d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b423798c0c datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2787 identity=7358 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/keystone-fernet-setup-77frb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.38 c777f266-8785-4db5-a94b-a94644b30a4f default }" containerID=660dbb0aa9a15521853f6eb94e328282d6f6aca347a7e6f15ff2fe18e6c05db4 datapathConfiguration="&{false false false false false }" interface=lxced5b1c9ea22f k8sPodName=openstack/keystone-db-sync-j96b7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=660dbb0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=660dbb0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0987599-af19-407e-8e22-44c4616bea15,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d0987599-af19-407e-8e22-44c4616bea15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=d0987599-af19-407e-8e22-44c4616bea15;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=d0987599-af19-407e-8e22-44c4616bea15;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=660dbb0aa9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1136 identity=2596 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=d0987599-af19-407e-8e22-44c4616bea15,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=d0987599-af19-407e-8e22-44c4616bea15,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=660dbb0aa9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1136 identity=2596 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=660dbb0aa9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1136 identity=2596 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=660dbb0aa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1136 identity=2596 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=660dbb0aa9 endpointID=1136 k8sNamespace=openstack k8sPodName=keystone-db-sync-j96b7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=d0987599-af19-407e-8e22-44c4616bea15 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=d0987599-af19-407e-8e22-44c4616bea15 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=660dbb0aa9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1136 identity=2596 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-db-sync-j96b7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 6bb0ef2d-81d7-4bc8-babe-500f33f46a44 default }" containerID=fc5d67072a40201c72e42ec64cbee93c6dbf66df7fd5b7b2404d0d5f9d002f35 datapathConfiguration="&{false false false false false }" interface=lxce549daed150f k8sPodName=openstack/keystone-rabbit-init-6vlk9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fc5d67072a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fc5d67072a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1511b288-9548-4117-ab3f-37352be50b31,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1511b288-9548-4117-ab3f-37352be50b31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1511b288-9548-4117-ab3f-37352be50b31;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=1511b288-9548-4117-ab3f-37352be50b31;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fc5d67072a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identity=52981 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1511b288-9548-4117-ab3f-37352be50b31,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=1511b288-9548-4117-ab3f-37352be50b31,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fc5d67072a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2836 identity=52981 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fc5d67072a datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2836 identity=52981 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fc5d67072a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2836 identity=52981 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fc5d67072a endpointID=2836 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-6vlk9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1511b288-9548-4117-ab3f-37352be50b31 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=1511b288-9548-4117-ab3f-37352be50b31 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=fc5d67072a datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2836 identity=52981 ipv4=10.0.0.250 ipv6= k8sPodName=openstack/keystone-rabbit-init-6vlk9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.247 6baab860-4a30-4643-b3d9-c5d22ba44dbd default }" containerID=c501ba26971998dbe761a64921ac0ba8dcc29974e69f4f8540e3409cafce6ac7 datapathConfiguration="&{false false false false false }" interface=lxc068a6803b28e k8sPodName=openstack/keystone-domain-manage-7vkxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c501ba2697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c501ba2697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c501ba2697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=51596 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c501ba2697 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1011 identity=51596 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c501ba2697 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1011 identity=51596 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=c501ba2697 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1011 identity=51596 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c501ba2697 endpointID=1011 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7vkxm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=8ba9989b-fd30-46b8-97cf-3d52294af5b8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c501ba2697 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1011 identity=51596 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/keystone-domain-manage-7vkxm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 3c70fb2e-461c-4e01-bde7-992380684fda default }" containerID=eff97a7221d076293c3d3c9b8d92b41cd1e052a9771d06c4ec6e3ae048904cf7 datapathConfiguration="&{false false false false false }" interface=lxc81789acdd655 k8sPodName=openstack/keystone-bootstrap-k6fqw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6227 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=772 identity=6227 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eff97a7221 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=772 identity=6227 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=endpoint level=info msg="Successful endpoint creation" containerID=eff97a7221 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=772 identity=6227 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eff97a7221 endpointID=772 k8sNamespace=openstack k8sPodName=keystone-bootstrap-k6fqw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=46a333de-6f99-4c47-96b8-92eb839c5c25 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=eff97a7221 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=772 identity=6227 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/keystone-bootstrap-k6fqw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 024c2970-e4bb-4cb6-8b94-e28e1dac3f38 default }" containerID=881010bc10a3ca1226ab992a89c51adc6708ee5031dfc7cd07c4bd40ac1bbea9 datapathConfiguration="&{false false false false false }" interface=lxcc54641597ecf k8sPodName=openstack/horizon-7775568f6c-2zqjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=881010bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=881010bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=881010bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=47458 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=881010bc10 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3682 identity=47458 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=881010bc10 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=3682 identity=47458 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=881010bc10 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=3682 identity=47458 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/horizon-7775568f6c-2zqjx subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.196 d7219d71-a140-4d42-913f-9a763af2160a default }" containerID=1f989c1ea228de4ee841e9d7c0ba1c97bc3503e77ea8d6bce78f799d1bb018d7 datapathConfiguration="&{false false false false false }" interface=lxcef20f4f40c86 k8sPodName=openstack/horizon-7775568f6c-zk9mq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1f989c1ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1f989c1ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1f989c1ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=47458 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1f989c1ea2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2204 identity=47458 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 0169df12-70ee-4df8-a7a7-ccae581b54c1 default }" containerID=997049e1633f9ffdfe533706ff3b5fe14e7e1ccafc7ee00e88499898ccbb48f5 datapathConfiguration="&{false false false false false }" interface=lxcedf065fbf0c5 k8sPodName=openstack/horizon-7775568f6c-c5k46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=997049e163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=997049e163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=997049e163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=47458 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=997049e163 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=47458 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 eacddd85-364f-45cd-90d7-e1d247239d80 default }" containerID=a0a217675061e88e81a18cd7e5fced830e94137de5f3a70627f13c4f971654c1 datapathConfiguration="&{false false false false false }" interface=lxc6d08d0ec706b k8sPodName=openstack/horizon-db-init-fxsk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a0a2176750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a0a2176750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a0a2176750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=11385 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a0a2176750 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=965 identity=11385 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1f989c1ea2 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2204 identity=47458 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq subsys=endpoint level=info msg="Successful endpoint creation" containerID=1f989c1ea2 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2204 identity=47458 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/horizon-7775568f6c-zk9mq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=997049e163 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=449 identity=47458 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=997049e163 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=449 identity=47458 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/horizon-7775568f6c-c5k46 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a0a2176750 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=965 identity=11385 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a0a2176750 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=965 identity=11385 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a0a2176750 endpointID=965 k8sNamespace=openstack k8sPodName=horizon-db-init-fxsk6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=e4e1446e-96b2-403e-80df-f95a7811c255 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=a0a2176750 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=965 identity=11385 ipv4=10.0.0.235 ipv6= k8sPodName=openstack/horizon-db-init-fxsk6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.150 8ceb878c-f3a3-47aa-82dd-9c12ae012a5a default }" containerID=83a1fa1e659aaaaca90b3bea199205411e849f01dbc450b3321096e7582b1133 datapathConfiguration="&{false false false false false }" interface=lxcd609d998bd8c k8sPodName=openstack/horizon-db-sync-jcqgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=83a1fa1e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=83a1fa1e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=83a1fa1e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=10852 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=83a1fa1e65 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=239 identity=10852 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=83a1fa1e65 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=239 identity=10852 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=83a1fa1e65 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=239 identity=10852 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=83a1fa1e65 endpointID=239 k8sNamespace=openstack k8sPodName=horizon-db-sync-jcqgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=80f573d7-c9d3-40aa-975a-aee0f616607f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=83a1fa1e65 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=239 identity=10852 ipv4=10.0.0.150 ipv6= k8sPodName=openstack/horizon-db-sync-jcqgn subsys=endpoint