level=info msg="Memory available for map entries (0.003% of 67421626368B): 168554065B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.089195ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="93.553µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.21195ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="18.771µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=97.753983ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="14.491µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="76.922µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="108.603µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="119.204µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="137.365µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="421.274µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.4µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=8.792256ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.724059ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="42.861µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="75.472µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="305.5µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="149.085µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="105.683µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=39.859677ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="149.795µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="11.15µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.44.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.854961ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.74952ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.72754ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="10.441µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.031µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.751µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.58µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.321µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="19.201µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="46.292µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="257.428µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="7.64µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="231.717µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.001282ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.429837ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.28µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="22.541µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.44 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.44 ipAddr.ipv6="" k8sNodeIP=199.204.45.44 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.44" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.79" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.44" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.44} {CiliumInternalIP 10.0.0.79}] 10.0.0.0/24 [] [] 10.0.0.37 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36225" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.829723617s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="25.171µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="8.14µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="45.532µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="3.71µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=160 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.771115069s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=304.622279ms file-path=/var/run/cilium/state/templates/5ee7c2c4f8914a42869925f4269b1e9c520b4c7866ef42382f9c3beeff221447/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.231 75314bd6-3ddc-473f-a2bc-faa2346f2bf2 default }" containerID=cde60c536aef9e028753effcac05ff991e301db703bbe667c16b706a331902a2 datapathConfiguration="&{false false false false false }" interface=lxc54932e1b9bb5 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.65 843be51c-97bf-46d3-b13f-f8a43574078d default }" containerID=fa4e75dec7bdc4c9fdb08d57a4f3298e093c5f65e9a60beaebbe72116eb3d101 datapathConfiguration="&{false false false false false }" interface=lxc6f7ad166d92a k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=endpoint level=info msg="New endpoint" containerID=fa4e75dec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fa4e75dec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fa4e75dec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=57925 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fa4e75dec7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=735 identity=57925 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=25213 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=851 identity=25213 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=160 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 ipv4=10.0.0.37 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identityLabels="reserved:health" ipv4=10.0.0.37 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=604 identity=4 identityLabels="reserved:health" ipv4=10.0.0.37 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.070092883s file-path=/var/run/cilium/state/templates/44b2cace20b4ade75b984ac4bd3b7f4262712947b8c35147731257964a5f938a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=604 identity=4 ipv4=10.0.0.37 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cde60c536a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=851 identity=25213 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=endpoint level=info msg="Successful endpoint creation" containerID=cde60c536a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=851 identity=25213 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fa4e75dec7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=735 identity=57925 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fa4e75dec7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=735 identity=57925 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cde60c536a endpointID=851 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-npm6g subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=445fca51-85eb-4199-b080-a5bd94aa4a97 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=cde60c536a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=851 identity=25213 ipv4=10.0.0.231 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-npm6g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 d80fa917-1e1c-4482-be0b-7b5ced2a0bfd default }" containerID=79067316dd509136d077415c6c52c57f288787f220afd14e49d1e6e9dad021b7 datapathConfiguration="&{false false false false false }" interface=lxc5fa253d2c49d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79067316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79067316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79067316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=62383 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79067316dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=976 identity=62383 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=79067316dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=976 identity=62383 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=79067316dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=976 identity=62383 ipv4=10.0.0.244 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-svbxm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=160 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00160 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00160 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00160 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00160:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=160 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 5b1329cc-393b-4417-9a8e-1e7d13f30777 default }" containerID=403857169a3f2672661b28f7e88f643a50da806e9d89cc98576bab0239223fbf datapathConfiguration="&{false false false false false }" interface=lxcf20a00ea3074 k8sPodName=kube-system/coredns-67659f764b-nh849 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=403857169a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=403857169a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=403857169a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=57925 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=403857169a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=57925 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.76 4093fe92-7aa1-4651-9685-b69744220b9a default }" containerID=a9c7af81bebd9bab3c433dafa5c7d6b5f74c86fa7a1f0f7793a85a9682d353e0 datapathConfiguration="&{false false false false false }" interface=lxc19f605962d7a k8sPodName=kube-system/coredns-67659f764b-kc45t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9c7af81be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9c7af81be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a9c7af81be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identity=57925 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a9c7af81be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2689 identity=57925 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=403857169a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3871 identity=57925 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 subsys=endpoint level=info msg="Successful endpoint creation" containerID=403857169a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3871 identity=57925 ipv4=10.0.0.70 ipv6= k8sPodName=kube-system/coredns-67659f764b-nh849 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a9c7af81be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2689 identity=57925 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9c7af81be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2689 identity=57925 ipv4=10.0.0.76 ipv6= k8sPodName=kube-system/coredns-67659f764b-kc45t subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.231 1b746465-f96f-4ede-8c06-70b25d0a2fdf default }" containerID=108cea5efcc0fc95378a4600dbcbd3571e539abf45d5e34d80cedac88c77d922 datapathConfiguration="&{false false false false false }" interface=lxcce9086f7f580 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=108cea5efc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=108cea5efc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=108cea5efc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=46038 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=108cea5efc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3090 identity=46038 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=108cea5efc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3090 identity=46038 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=108cea5efc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3090 identity=46038 ipv4=10.0.0.231 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-ll5g6 subsys=daemon level=info msg="Delete endpoint request" containerID=fa4e75dec7 endpointID=735 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-fcqq4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=fa4e75dec7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=735 identity=57925 ipv4=10.0.0.65 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-fcqq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 0e2725a7-4451-488b-8450-51fedf72d86f default }" containerID=6c5c1907f70b93d03aff1d19dfc7e4cde2d75a5da941b7d8f973badce910697a datapathConfiguration="&{false false false false false }" interface=lxc396ab172530c k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.165 e5fd50d7-2eaf-4d71-8687-a034f2affbee default }" containerID=e08e273eb0d7694acbcf4eb52e16c5eccd75d2f02a11220943f263cfc86b9b51 datapathConfiguration="&{false false false false false }" interface=lxcd007bbc00867 k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm subsys=endpoint level=info msg="New endpoint" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 de86cf8a-49fb-4438-a6a7-2eaee0c6b464 default }" containerID=029cc2b3a595c1512e209d8ec4b53108cb425574d96b4e337e81db768023dc4d datapathConfiguration="&{false false false false false }" interface=lxcec685faf5b21 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=54109 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=228 identity=54109 ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=25227 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=101 identity=25227 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=8365 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2403 identity=8365 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6c5c1907f7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=228 identity=54109 ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm subsys=endpoint level=info msg="Successful endpoint creation" containerID=6c5c1907f7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=228 identity=54109 ipv4=10.0.0.108 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-ln6zm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e08e273eb0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=101 identity=25227 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq subsys=endpoint level=info msg="Successful endpoint creation" containerID=e08e273eb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=101 identity=25227 ipv4=10.0.0.165 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-bk8sq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=029cc2b3a5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2403 identity=8365 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=029cc2b3a5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2403 identity=8365 ipv4=10.0.0.87 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pw5k6 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.201 935b358a-3584-4661-94e1-66877d4f4c9a default }" containerID=359e7537d251ceb9b0af4ee915c51edfa9d577e826e0e3d67f99652f70b03230 datapathConfiguration="&{false false false false false }" interface=lxc635f8bb8e6b6 k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=359e7537d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=359e7537d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=359e7537d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=50025 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=359e7537d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=52 identity=50025 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=359e7537d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=52 identity=50025 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=endpoint level=info msg="Successful endpoint creation" containerID=359e7537d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=50025 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=359e7537d2 endpointID=52 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-hc76z subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=3f384bf0-c49b-4d4f-888b-7a02a36a84fe k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=359e7537d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=52 identity=50025 ipv4=10.0.0.201 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-hc76z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 807e8c21-1a7f-41f0-a36b-b31004c45f28 default }" containerID=58100c62a29982c2795f5e8f4052a3ce5438956e72c9df707e4187899731b209 datapathConfiguration="&{false false false false false }" interface=lxc9054b35d1a5e k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58100c62a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58100c62a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=58100c62a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=39457 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=58100c62a2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1518 identity=39457 ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=58100c62a2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1518 identity=39457 ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=58100c62a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1518 identity=39457 ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=58100c62a2 endpointID=1518 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-bfdt7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=bbdf8d3b-e356-4eba-a926-5a00d78e150e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=58100c62a2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1518 identity=39457 ipv4=10.0.0.33 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-bfdt7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 377ff7e7-df9f-4ef8-af0b-ae7e824755fa default }" containerID=65dde0180ca66309a3647fb29db71acb43d35124f2166b700afb47f87a19c1b3 datapathConfiguration="&{false false false false false }" interface=lxc34dcb1c3d409 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=65dde0180c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=65dde0180c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=65dde0180c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identity=3041 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=65dde0180c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2512 identity=3041 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=65dde0180c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2512 identity=3041 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=65dde0180c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2512 identity=3041 ipv4=10.0.0.25 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-m2vs9 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 7f2a413d-2ccd-4694-88ad-bf56d808c99d default }" containerID=54e1f92989926b6e8815fbe34ee9812872ecd651b4cfa50be1d929428853578a datapathConfiguration="&{false false false false false }" interface=lxca55d4751969a k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=54e1f92989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=54e1f92989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=54e1f92989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=60796 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=54e1f92989 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2197 identity=60796 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=54e1f92989 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2197 identity=60796 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=endpoint level=info msg="Successful endpoint creation" containerID=54e1f92989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2197 identity=60796 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=54e1f92989 endpointID=2197 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-8925c subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=43a0d14f-55a7-454f-b24b-c527c034ecfa k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=54e1f92989 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2197 identity=60796 ipv4=10.0.0.139 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-8925c subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=8573e4ae-55f4-483d-9126-144feaeb2882] Description:}]" policyAddRequest=317f8f7e-4b48-4215-b6b7-7caac8a2562c subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=317f8f7e-4b48-4215-b6b7-7caac8a2562c policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=c7c814d0-4d76-4ff7-a2e9-e1d35d0af047] Description:}]" policyAddRequest=d1721b72-2223-42e9-85f4-6bfbc2f8a02b subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d1721b72-2223-42e9-85f4-6bfbc2f8a02b policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.184 5eede377-c637-43ea-ad02-dbde6e3f1729 default }" containerID=294bd046dc02d895ae64f112be2c6accec156b0f681e778c69592703a001d682 datapathConfiguration="&{false false false false false }" interface=lxc4fe1ac92037d k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=44992 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=26 identity=44992 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=294bd046dc datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=26 identity=44992 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 subsys=endpoint level=info msg="Successful endpoint creation" containerID=294bd046dc datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=26 identity=44992 ipv4=10.0.0.184 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-ktl45 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.176 f34b119b-96f6-4c05-a1c0-815f77843254 default }" containerID=73017c571db9a839c6e7982260ba21415ddf3feabb6cc5ddba13c9a1a893b61e datapathConfiguration="&{false false false false false }" interface=lxc0f37eaa1a075 k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=73017c571d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=73017c571d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=73017c571d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=23376 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=73017c571d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=23376 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=73017c571d datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=71 identity=23376 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf subsys=endpoint level=info msg="Successful endpoint creation" containerID=73017c571d datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=71 identity=23376 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-65whf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.158 ceb36d7e-1145-4002-bdf2-6e04022d2cd2 default }" containerID=5c331a80511f3dde8aaabed969b9882340fb56492be494e94feaca6074d62e0d datapathConfiguration="&{false false false false false }" interface=lxc1895cb8b0120 k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=21960 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1300 identity=21960 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c331a8051 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1300 identity=21960 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c331a8051 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1300 identity=21960 ipv4=10.0.0.158 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-5qhlx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.242 ca2e640b-eaba-4585-8b23-936362a13477 default }" containerID=67ed335c572c1baa52b626b74b6717554436c98ec8b7c5bb798213976d9cd576 datapathConfiguration="&{false false false false false }" interface=lxc0ec8c3db6cb3 k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=67ed335c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=67ed335c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=67ed335c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=67ed335c57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=935 identity=49542 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=67ed335c57 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=935 identity=49542 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=67ed335c57 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=935 identity=49542 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.103 80a53f31-d350-47fc-9734-88f8a37c5286 default }" containerID=79222403a0eaea244115ee61907b7c141f1bfbafeb0ec399ec76a119b171bacb datapathConfiguration="&{false false false false false }" interface=lxcdf505f276771 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=79222403a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=79222403a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=79222403a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=31490 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=79222403a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=31490 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=79222403a0 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2351 identity=31490 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=79222403a0 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2351 identity=31490 ipv4=10.0.0.103 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=67ed335c57 endpointID=935 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=67ed335c57 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=935 identity=49542 ipv4=10.0.0.242 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6b8c7a3e-f008-4d36-883d-fce3e19063a0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.221 0dd30d9e-d1dd-42f7-85f1-74735bac850a default }" containerID=40c588fd31b736781f1063297389f3c4b4fb1635e41417f5696785e865979ca3 datapathConfiguration="&{false false false false false }" interface=lxcf2d7730d4055 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identity=12964 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identity=12964 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=40c588fd31 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=2845 identity=12964 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=40c588fd31 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=2845 identity=12964 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ee1837b3-4cca-463a-93df-9845890570b2] Description:}]" policyAddRequest=20dd783a-a3c2-4adb-aa27-26ceeacd9ed0 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=20dd783a-a3c2-4adb-aa27-26ceeacd9ed0 policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.116 75d36804-6b6a-4fba-af59-8bafc2a256e4 default }" containerID=01d97310af44b81295f30472472b868595ab4244105383bb51534ae2c9873406 datapathConfiguration="&{false false false false false }" interface=lxc51de2175695a k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=01d97310af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=01d97310af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=01d97310af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=01d97310af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=986 identity=49542 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=01d97310af datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=986 identity=49542 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=endpoint level=info msg="Successful endpoint creation" containerID=01d97310af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=986 identity=49542 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=daemon level=info msg="Delete endpoint request" containerID=01d97310af endpointID=986 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=01d97310af datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=986 identity=49542 ipv4=10.0.0.116 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-33d6aa33-0e51-414e-be3b-48a844934a5f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.134 019d0f38-3a65-489c-8d7b-f569444371b7 default }" containerID=707d7142dac71f941fe1a73f7f2937267943b29561cdcb9d470184a3b9a539e6 datapathConfiguration="&{false false false false false }" interface=lxc414fcf688e7a k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=707d7142da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=707d7142da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=707d7142da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=1782 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=707d7142da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2182 identity=1782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=707d7142da datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=2182 identity=1782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=707d7142da datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=2182 identity=1782 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=f74690ec-7123-40ad-8d86-c1248565dc5d] Description:}]" policyAddRequest=d3af5d3c-7782-43f8-9d0c-e41ff02017b8 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=d3af5d3c-7782-43f8-9d0c-e41ff02017b8 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 2dd0c4d0-8141-49f2-83d9-084dd79cc059 default }" containerID=8155f7671a99cc01302ca0f25cb5ad67e02744fd0c7fb51ddd62a61a9f8226b4 datapathConfiguration="&{false false false false false }" interface=lxc124b344d6f19 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8155f7671a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8155f7671a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8155f7671a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=3446 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8155f7671a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=3446 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8155f7671a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=932 identity=3446 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8155f7671a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=932 identity=3446 ipv4=10.0.0.46 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009793444884818809 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.236 71adab56-7561-4136-ab4e-8523e60065e8 default }" containerID=08680511689187fd3c52e825a90b94c693f6a35c56f7fa4b911e8e592e659432 datapathConfiguration="&{false false false false false }" interface=lxc804804106f6e k8sPodName=monitoring/node-feature-discovery-worker-gkfkk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.250 bc033409-33f8-433b-a3f3-014c5604c86e default }" containerID=9ad5730ebfd5e745292632228fe4bb227c43d44e51eef36442b7742fd6c0d91c datapathConfiguration="&{false false false false false }" interface=lxc70a87be7209c k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identity=17062 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2439 identity=17062 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=33375 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=33375 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.227 14ef4be0-c5e4-42a2-95b2-e3f4dfa8d7bb default }" containerID=fbb7b42fc0f60b014069198407ec3fd8985e98306b47c98726887d4276036e1a datapathConfiguration="&{false false false false false }" interface=lxcfeb8f7689a3b k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fbb7b42fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fbb7b42fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fbb7b42fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=22280 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fbb7b42fc0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2682 identity=22280 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9ad5730ebf datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=360 identity=33375 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=9ad5730ebf datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=360 identity=33375 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-7jq9t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0868051168 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2439 identity=17062 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk subsys=endpoint level=info msg="Successful endpoint creation" containerID=0868051168 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2439 identity=17062 ipv4=10.0.0.236 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-gkfkk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fbb7b42fc0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2682 identity=22280 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=fbb7b42fc0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2682 identity=22280 ipv4=10.0.0.227 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kbqfd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 4b6145d1-4b35-4704-9676-e8534c31f5ba default }" containerID=ecc5ce727c1e3e9c1e499fd174421038a9e45f0115b31c86434c050a82780892 datapathConfiguration="&{false false false false false }" interface=lxc5afa7a787bd5 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ecc5ce727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ecc5ce727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ecc5ce727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=11045 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ecc5ce727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=139 identity=11045 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ecc5ce727c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=139 identity=11045 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k subsys=endpoint level=info msg="Successful endpoint creation" containerID=ecc5ce727c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=139 identity=11045 ipv4=10.0.0.73 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-lxx2k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=160 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-176-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00160 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00160 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00160 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00160:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=160 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 b2a2146a-8049-4ae5-be14-266da7db0b62 default }" containerID=ea0f6c65af447ca8a28562eab6917a7ca4b6c7b0d6ae737636e8498e5309e20a datapathConfiguration="&{false false false false false }" interface=lxc591613da8ac8 k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea0f6c65af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea0f6c65af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea0f6c65af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=38378 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea0f6c65af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=137 identity=38378 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea0f6c65af datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=137 identity=38378 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea0f6c65af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=38378 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea0f6c65af endpointID=137 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-l2cf2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=dd824da2-fa91-410f-b922-ac10bb84717c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ea0f6c65af datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=137 identity=38378 ipv4=10.0.0.116 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-l2cf2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.218 01cc6c3b-4c21-417f-b07b-c111704e0d92 default }" containerID=7fcce651fecd9422ab7128d2cbce7c44f2c9ab86d4eb18e8f5cf252a7cb86cbe datapathConfiguration="&{false false false false false }" interface=lxc9845f78a350f k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7fcce651fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7fcce651fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7fcce651fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=52174 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7fcce651fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1341 identity=52174 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 ad3b8e1b-8fab-4b4e-b692-f2b97019da9c default }" containerID=7914ca54f8fac63908f7a95084ec09a40304de2a82bc8634d976676f14ff2081 datapathConfiguration="&{false false false false false }" interface=lxcf4e9e244b602 k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7914ca54f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7914ca54f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.179 24be5aff-7896-46d2-8f4f-643e014845e5 default }" containerID=e58a5afd73e8eac16779bbbd69e3839db7195b98700d1a12a93a99f6d106ecdf datapathConfiguration="&{false false false false false }" interface=lxca170182916eb k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e58a5afd73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e58a5afd73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Rewrote endpoint BPF program" containerID=7fcce651fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1341 identity=52174 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=7914ca54f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=52760 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7914ca54f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=320 identity=52760 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=7fcce651fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1341 identity=52174 ipv4=10.0.0.218 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-9h7dm subsys=daemon level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e58a5afd73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=48494 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e58a5afd73 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2421 identity=48494 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7914ca54f8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=320 identity=52760 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp subsys=endpoint level=info msg="Successful endpoint creation" containerID=7914ca54f8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=320 identity=52760 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-69bfdff879-l87pp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e58a5afd73 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2421 identity=48494 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e58a5afd73 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2421 identity=48494 ipv4=10.0.0.179 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-rm2z8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.150 f9d6c2b3-3c93-4569-a118-4b787615deff default }" containerID=7f6f620d1785e2b85e4ef62a98d512df41b74aab8825f93c2aeba2033bda70f1 datapathConfiguration="&{false false false false false }" interface=lxcd4df2a688f9e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7f6f620d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7f6f620d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7f6f620d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=21103 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7f6f620d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1991 identity=21103 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7f6f620d17 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1991 identity=21103 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=endpoint level=info msg="Successful endpoint creation" containerID=7f6f620d17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=21103 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7f6f620d17 endpointID=1991 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-5wj8p subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=b9f00a6b-0415-4f5a-b8e7-5b3def44cdbc k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=7f6f620d17 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1991 identity=21103 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-5wj8p subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 eaca0a5b-199b-413c-b258-8ce5a9863da7 default }" containerID=71eeca80016add31f3a5930bca7cf6e040e8cca46a275f179f7021e4a52f8116 datapathConfiguration="&{false false false false false }" interface=lxc26c3ba43f392 k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=71eeca8001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=71eeca8001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=71eeca8001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=71eeca8001 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3924 identity=49542 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=71eeca8001 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3924 identity=49542 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=endpoint level=info msg="Successful endpoint creation" containerID=71eeca8001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3924 identity=49542 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 112d29a2-5f8a-4d2c-808c-d5fa8dfab788 default }" containerID=13c050fd36fa6e80466a14e85ce8c6a41cfad77f06125908849cc8aa7621635b datapathConfiguration="&{false false false false false }" interface=lxc688627e0ca4b k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=13c050fd36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=13c050fd36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=13c050fd36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=13c050fd36 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3681 identity=49542 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=13c050fd36 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3681 identity=49542 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=endpoint level=info msg="Successful endpoint creation" containerID=13c050fd36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3681 identity=49542 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=daemon level=info msg="Delete endpoint request" containerID=71eeca8001 endpointID=3924 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=71eeca8001 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3924 identity=49542 ipv4=10.0.0.120 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-cc97e822-5cec-4d77-9a56-23de4d9bd1fe subsys=endpoint level=info msg="Delete endpoint request" containerID=13c050fd36 endpointID=3681 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=13c050fd36 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3681 identity=49542 ipv4=10.0.0.237 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-deff9f8b-3735-46b1-a1bd-61e4753bd564 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 2ce6941a-adf8-48bf-b58b-4393e3b4ed70 default }" containerID=da2b62186147fc013edc3f4c1c710bd021802aeed256a1ad0b74bad360b7fc75 datapathConfiguration="&{false false false false false }" interface=lxcd32a6c9304ab k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=da2b621861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=da2b621861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da2b621861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=63098 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da2b621861 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1775 identity=63098 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=da2b621861 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1775 identity=63098 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 a52aca91-29cb-4161-8e28-cd912da9e242 default }" containerID=1151af42880190950848931a8eaaa87bc79b30b9fc0a87359148541b91e7c689 datapathConfiguration="&{false false false false false }" interface=lxcee3826442f94 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1151af4288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=da2b621861 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1775 identity=63098 ipv4=10.0.0.53 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-dgtj4 subsys=daemon level=info msg="Resolving identity labels (blocking)" containerID=1151af4288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.195 1ce676f4-a6ab-4d3f-ba21-1b8235ff3d53 default }" containerID=ee3d217963324a38e60d046e4b9b0475cedbdbc68a478efd872090c526a5aa43 datapathConfiguration="&{false false false false false }" interface=lxc4e11630d0173 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ee3d217963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ee3d217963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=1151af4288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=16232 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1151af4288 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1063 identity=16232 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ee3d217963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=15949 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ee3d217963 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=105 identity=15949 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 d05c5c0c-6e00-4763-9075-59fc102ee945 default }" containerID=3af15a546ed3c13a5b3afdfd7a08e19e9d92913110bd41093fa159dbcd853554 datapathConfiguration="&{false false false false false }" interface=lxce6135f01b1c9 k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3af15a546e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3af15a546e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3af15a546e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3af15a546e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3787 identity=49542 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ee3d217963 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=105 identity=15949 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ee3d217963 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=105 identity=15949 ipv4=10.0.0.195 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1151af4288 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1063 identity=16232 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1151af4288 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1063 identity=16232 ipv4=10.0.0.26 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3af15a546e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3787 identity=49542 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3af15a546e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=49542 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.181 8541392e-e3a5-4def-b9f0-2b812e08751f default }" containerID=2b3c96a3919ef3494d0d45a91eab6c0453a1581c6c8bd49ade4ad40e5012aa7f datapathConfiguration="&{false false false false false }" interface=lxc43712b4b4d99 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b3c96a391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b3c96a391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b3c96a391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identity=19953 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b3c96a391 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3729 identity=19953 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.192 1a85a4ef-5596-433b-b96e-469a9671f43c default }" containerID=d2d1fe9e7b90f574d30d9e24eddd356adae081517b7169abb48793c197db41c3 datapathConfiguration="&{false false false false false }" interface=lxcc89e7af9da59 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2d1fe9e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2d1fe9e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2d1fe9e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=31580 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2d1fe9e7b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=686 identity=31580 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b3c96a391 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3729 identity=19953 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b3c96a391 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3729 identity=19953 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d2d1fe9e7b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=686 identity=31580 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2d1fe9e7b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=686 identity=31580 ipv4=10.0.0.192 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.14 b319347d-5e2a-44de-8efa-a0287348a48c default }" containerID=549b7097d6c90a9a4e1fd9a274cad0fdd8fea630f875f36f37ec467a317443e1 datapathConfiguration="&{false false false false false }" interface=lxc8601b74e328c k8sPodName=monitoring/vector-s99ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=549b7097d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=549b7097d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=549b7097d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=29161 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=549b7097d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1957 identity=29161 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=549b7097d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1957 identity=29161 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=549b7097d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1957 identity=29161 ipv4=10.0.0.14 ipv6= k8sPodName=monitoring/vector-s99ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3af15a546e endpointID=3787 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=3af15a546e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3787 identity=49542 ipv4=10.0.0.198 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-025783bc-d2a9-406c-8437-452efc7d6785 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.235 d0dc5522-8150-4c5d-869c-757bc63119c8 default }" containerID=0385544a97bd4a23b2ce2e4d08c3ce8c59ca1e49c4edc9d817a07aa6cfbe350f datapathConfiguration="&{false false false false false }" interface=lxc8fef9e8d6c5d k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0385544a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0385544a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0385544a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=1115 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0385544a97 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=1115 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0385544a97 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=1115 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0385544a97 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=1115 ipv4=10.0.0.235 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.47 c4571c30-0aa8-447a-a4ac-4640146e6496 default }" containerID=33de11828f4906e929b525df8fbc89d86c5051d8d70d8ad92e0062bf651b89bc datapathConfiguration="&{false false false false false }" interface=lxc9596cfaaf3c4 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33de11828f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2559 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33de11828f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2559 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33de11828f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2559 identity=53685 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=33de11828f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2559 identity=53685 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33de11828f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2559 identity=53685 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq subsys=endpoint level=info msg="Successful endpoint creation" containerID=33de11828f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2559 identity=53685 ipv4=10.0.0.47 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-ztmmq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.182 df08950e-cd60-4655-884b-c7893689fd2e default }" containerID=8fa310d7c24dc70f6364fd146a5e54643e476f16e055dbd2b240c431c09ad07b datapathConfiguration="&{false false false false false }" interface=lxc7ba49a81a503 k8sPodName=openstack/memcached-memcached-6479589586-s84pm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=34879 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1272 identity=34879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8fa310d7c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1272 identity=34879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8fa310d7c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1272 identity=34879 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-s84pm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.105 f9560ed5-1d07-4e37-89a3-31d620f7741f default }" containerID=9341d761ab60d11bca18c462c1b0e68932fc5598c92348f5124d78573c1891fd datapathConfiguration="&{false false false false false }" interface=lxc1ab526c669f4 k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9341d761ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9341d761ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9341d761ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9341d761ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3961 identity=49542 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9341d761ab datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3961 identity=49542 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=endpoint level=info msg="Successful endpoint creation" containerID=9341d761ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3961 identity=49542 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=daemon level=info msg="Delete endpoint request" containerID=9341d761ab endpointID=3961 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9341d761ab datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3961 identity=49542 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-260fdfa6-acfa-4d44-b6c1-79e4cc44f11a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 50941f60-4e95-4b76-8b56-2e464d4b4381 default }" containerID=f09a3d48665597e7c3447261d158672dc6f6726d881b737ea2ef4fc64e354c71 datapathConfiguration="&{false false false false false }" interface=lxc1bff4be4843b k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f09a3d4866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f09a3d4866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f09a3d4866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identity=3680 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f09a3d4866 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3139 identity=3680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f09a3d4866 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3139 identity=3680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f09a3d4866 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3139 identity=3680 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.240 4cce0440-e305-472e-9ead-c422314e7826 default }" containerID=426c29cc6aedceaea7a9b39074eb3b330510b234f30820dac76d6d0d90063b3c datapathConfiguration="&{false false false false false }" interface=lxc7dd68e926b68 k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=426c29cc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=426c29cc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=426c29cc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=40513 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=426c29cc6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3115 identity=40513 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 1819af4a-a13c-4351-bbf3-4d1f59cf0024 default }" containerID=800d96fb77295be52ccb5370121b5e323f5e367d1ea9dd2369a76f541b1299d8 datapathConfiguration="&{false false false false false }" interface=lxc98cad22dc4f6 k8sPodName=openstack/keystone-credential-setup-k2xwz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=800d96fb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=800d96fb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=800d96fb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identity=11312 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=800d96fb77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3706 identity=11312 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=426c29cc6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3115 identity=40513 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg subsys=endpoint level=info msg="Successful endpoint creation" containerID=426c29cc6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3115 identity=40513 ipv4=10.0.0.240 ipv6= k8sPodName=openstack/keystone-api-5dfcc5cbcf-8gsrg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=800d96fb77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3706 identity=11312 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=endpoint level=info msg="Successful endpoint creation" containerID=800d96fb77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3706 identity=11312 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=800d96fb77 endpointID=3706 k8sNamespace=openstack k8sPodName=keystone-credential-setup-k2xwz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=bd9d5e48-f764-4374-b19d-9fdefe479494 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=800d96fb77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3706 identity=11312 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/keystone-credential-setup-k2xwz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.148 67662947-5d5c-4586-a237-8cf926cda04e default }" containerID=e599737d93c78d046d8cacd9a326ae1ea6767569300915deed42cda52d02d8b5 datapathConfiguration="&{false false false false false }" interface=lxce646f10f1dd3 k8sPodName=openstack/keystone-db-init-9vr99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e599737d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e599737d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e599737d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=14389 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e599737d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=492 identity=14389 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e599737d93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=492 identity=14389 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e599737d93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=492 identity=14389 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e599737d93 endpointID=492 k8sNamespace=openstack k8sPodName=keystone-db-init-9vr99 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9d38f9cb-8576-4af2-9254-18a04d9b3bd7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e599737d93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=492 identity=14389 ipv4=10.0.0.148 ipv6= k8sPodName=openstack/keystone-db-init-9vr99 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 40aee536-ea8b-40c0-809d-1e6fe12a22a0 default }" containerID=9bdfc206a36280c99574e3522cef5cc23354b1abb35b75d5978bce3f69501a49 datapathConfiguration="&{false false false false false }" interface=lxc2e7072c9cf0b k8sPodName=openstack/keystone-fernet-setup-sldk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=20763 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=205 identity=20763 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9bdfc206a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=205 identity=20763 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9bdfc206a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=20763 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9bdfc206a3 endpointID=205 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-sldk2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=c557ea50-2ccf-4e11-baef-28e9f1562759 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9bdfc206a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=205 identity=20763 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/keystone-fernet-setup-sldk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 99e8fa10-60ef-4eae-9130-60a5d9fc98a6 default }" containerID=ae791b2c6604aaffdda8a65683eeff76ba3a85bedcc435d98935bad743a457c2 datapathConfiguration="&{false false false false false }" interface=lxc39b9b0d8ac31 k8sPodName=openstack/keystone-db-sync-2hfvw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ae791b2c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ae791b2c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ae791b2c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=59953 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ae791b2c66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3684 identity=59953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ae791b2c66 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3684 identity=59953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=endpoint level=info msg="Successful endpoint creation" containerID=ae791b2c66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3684 identity=59953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ae791b2c66 endpointID=3684 k8sNamespace=openstack k8sPodName=keystone-db-sync-2hfvw subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=1a4993b0-2e59-47bd-923e-9c3cd8687e86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ae791b2c66 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3684 identity=59953 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/keystone-db-sync-2hfvw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 8b52b2a7-f4cf-4c80-8ecf-831ff13ec3ee default }" containerID=0021f60147c2a3279a100f27e4c754c8af2bf83eb283e6349b600485f6051025 datapathConfiguration="&{false false false false false }" interface=lxcce426d0665f8 k8sPodName=openstack/keystone-rabbit-init-57n2g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0021f60147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0021f60147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0021f60147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=7624 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0021f60147 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1345 identity=7624 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0021f60147 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1345 identity=7624 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=endpoint level=info msg="Successful endpoint creation" containerID=0021f60147 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=7624 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=daemon level=info msg="Delete endpoint request" containerID=0021f60147 endpointID=1345 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-57n2g subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=85d1662c-f104-4275-a9ae-61a4d86863a1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0021f60147 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1345 identity=7624 ipv4=10.0.0.198 ipv6= k8sPodName=openstack/keystone-rabbit-init-57n2g subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.251 2c5d0767-6e6f-4a0e-888a-cce2a0857180 default }" containerID=2b4b6b3413e93825563e59eb246cc3eeef09a4b39dcc7fb22404dda833c5027b datapathConfiguration="&{false false false false false }" interface=lxc23399e502195 k8sPodName=openstack/keystone-domain-manage-t8d6z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b4b6b3413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b4b6b3413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b4b6b3413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=10841 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b4b6b3413 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=63 identity=10841 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2b4b6b3413 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=63 identity=10841 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b4b6b3413 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=10841 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b4b6b3413 endpointID=63 k8sNamespace=openstack k8sPodName=keystone-domain-manage-t8d6z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=7d1f9c00-fc06-448b-891a-41971f00aa8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=2b4b6b3413 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=63 identity=10841 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/keystone-domain-manage-t8d6z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 6cc2d028-98e6-41a7-864d-0ef54dcd3f39 default }" containerID=c61a65e2cc60f4e487ff1af1a5e0b3ffb9554602bb9ac2f21cfffd810394ae7d datapathConfiguration="&{false false false false false }" interface=lxcfb7b5638149c k8sPodName=openstack/keystone-bootstrap-b84vg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c61a65e2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c61a65e2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=c61a65e2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=41417 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c61a65e2cc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=906 identity=41417 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c61a65e2cc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=906 identity=41417 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c61a65e2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=41417 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c61a65e2cc endpointID=906 k8sNamespace=openstack k8sPodName=keystone-bootstrap-b84vg subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=23281ec9-c6c3-48ac-9994-1eb5ee6d5dab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=c61a65e2cc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=906 identity=41417 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/keystone-bootstrap-b84vg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 7c3daca1-653d-448d-83a9-877b33489747 default }" containerID=d44a86940aecae20042b43e033c381183e58b2795a9bebbb3e56d34c69a22de8 datapathConfiguration="&{false false false false false }" interface=lxccdb45430732a k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d44a86940a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d44a86940a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d44a86940a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d44a86940a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2084 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d44a86940a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2084 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d44a86940a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=daemon level=info msg="Delete endpoint request" containerID=d44a86940a endpointID=2084 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=d44a86940a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2084 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c047c427-a48b-4830-b800-c3a09d5b6a44 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.42 a83fa474-b6a5-4ebb-88b9-017067f35b7a default }" containerID=42220474b04e887396420180b16832e610802292df39f9e07c2bcb99967e648b datapathConfiguration="&{false false false false false }" interface=lxccf776fd4acd6 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=42220474b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=42220474b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=42220474b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=17021 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=42220474b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=682 identity=17021 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=42220474b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=682 identity=17021 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=42220474b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=682 identity=17021 ipv4=10.0.0.42 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 1c050f50-743c-48d9-bbf1-4f7a280b5f64 default }" containerID=724fdce5ea93e4e384f2b0f708c1f6f63fe8ea695661f4a45439f0b6b4b00324 datapathConfiguration="&{false false false false false }" interface=lxc6a602bd906e3 k8sPodName=openstack/barbican-api-758df47595-n2wmz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=724fdce5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=724fdce5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=724fdce5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=806 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=724fdce5ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=806 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 3d5cc3ae-db11-4701-937e-cbe723c83f48 default }" containerID=3c2ec5bd7615dd3fa827ded7499f073874a32a5881eba234e0a57d912b63d2ad datapathConfiguration="&{false false false false false }" interface=lxc70bf9378461a k8sPodName=openstack/barbican-db-init-v8z6n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c2ec5bd76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c2ec5bd76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c2ec5bd76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=29118 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c2ec5bd76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3487 identity=29118 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=724fdce5ea datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=806 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz subsys=endpoint level=info msg="Successful endpoint creation" containerID=724fdce5ea datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=806 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/barbican-api-758df47595-n2wmz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3c2ec5bd76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3487 identity=29118 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c2ec5bd76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3487 identity=29118 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c2ec5bd76 endpointID=3487 k8sNamespace=openstack k8sPodName=barbican-db-init-v8z6n subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=fda5fae9-970d-4202-b6eb-c7876f002d89 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3c2ec5bd76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3487 identity=29118 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/barbican-db-init-v8z6n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 f96d4c4f-c267-416c-9b10-786bcb8cfe77 default }" containerID=31f625c01fa641204bfe2f0cbddcfb436ec131c3dc8b3aaa7d77d19556833665 datapathConfiguration="&{false false false false false }" interface=lxc3a3e7102b6dc k8sPodName=openstack/barbican-db-sync-ntvfb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=45792 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=558 identity=45792 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=31f625c01f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=558 identity=45792 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=endpoint level=info msg="Successful endpoint creation" containerID=31f625c01f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=558 identity=45792 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=31f625c01f endpointID=558 k8sNamespace=openstack k8sPodName=barbican-db-sync-ntvfb subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=bc93085f-6738-4bdf-8b5d-79908c5aa460 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=31f625c01f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=558 identity=45792 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/barbican-db-sync-ntvfb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 78ae71ca-031e-4dc6-bf9f-97215730ebfa default }" containerID=a7c8aef9aabb59cbbaf0b334adfaf00f49a5414074adc52b7bb03f1175df2d50 datapathConfiguration="&{false false false false false }" interface=lxcce369a0c560d k8sPodName=openstack/barbican-rabbit-init-g2p49 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=10217 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=863 identity=10217 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7c8aef9aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=863 identity=10217 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7c8aef9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=863 identity=10217 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.036120091441557214 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=a7c8aef9aa endpointID=863 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-g2p49 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=3fd72560-4954-478b-9ec3-b59c7f31abd5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a7c8aef9aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=863 identity=10217 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/barbican-rabbit-init-g2p49 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 050220dd-2d03-4278-a72b-1ae0f23cb6c7 default }" containerID=b9e62cedf1685ea9206fc44c6c80a1b2309224362f11d025db84698c97ffc8b7 datapathConfiguration="&{false false false false false }" interface=lxca03a4988329c k8sPodName=openstack/barbican-ks-service-5w5xw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9e62cedf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9e62cedf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9e62cedf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=55590 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b9e62cedf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2083 identity=55590 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9e62cedf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2083 identity=55590 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9e62cedf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2083 identity=55590 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b9e62cedf1 endpointID=2083 k8sNamespace=openstack k8sPodName=barbican-ks-service-5w5xw subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=e6d780d6-ae02-4029-8536-6c9a370a1ad1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b9e62cedf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2083 identity=55590 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/barbican-ks-service-5w5xw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.223 f5680bf4-b111-486b-9933-ab1359eac93c default }" containerID=c348fb31b4510a04acc74ff75798e1870adee230528b8267ce41106438810036 datapathConfiguration="&{false false false false false }" interface=lxcb3e4d874894d k8sPodName=openstack/barbican-ks-endpoints-6tbs6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c348fb31b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c348fb31b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c348fb31b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=5286 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c348fb31b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=395 identity=5286 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c348fb31b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=395 identity=5286 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c348fb31b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=5286 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=daemon level=info msg="Delete endpoint request" containerID=c348fb31b4 endpointID=395 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-6tbs6 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=8e4523fe-da8b-4915-92cf-9956cc7b69dd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c348fb31b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=395 identity=5286 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/barbican-ks-endpoints-6tbs6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 3f0eca70-2c8e-467a-8509-5ff56ada0e71 default }" containerID=d93f6a2959f1c1bd572d634c807e2713808cd53fded9fa9b8a45237d0d4af048 datapathConfiguration="&{false false false false false }" interface=lxc641826938dff k8sPodName=openstack/barbican-ks-user-k4gjf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d93f6a2959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d93f6a2959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d93f6a2959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=10729 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d93f6a2959 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=663 identity=10729 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d93f6a2959 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=663 identity=10729 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d93f6a2959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=10729 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=daemon level=info msg="Delete endpoint request" containerID=d93f6a2959 endpointID=663 k8sNamespace=openstack k8sPodName=barbican-ks-user-k4gjf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=3cf57d06-8bd1-4f7c-a220-2e30ab81b9f2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d93f6a2959 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=663 identity=10729 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/barbican-ks-user-k4gjf subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.220 bfb75a93-f588-4f7a-b88c-933a92bbc374 default }" containerID=585348be949a6eb00de3ff7a950fe3202f8e58e6fe07c26e74cdebe85f450e17 datapathConfiguration="&{false false false false false }" interface=lxc1ae50fa64fb5 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=585348be94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=585348be94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=585348be94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=43190 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=585348be94 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=106 identity=43190 ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=585348be94 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=106 identity=43190 ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm subsys=endpoint level=info msg="Successful endpoint creation" containerID=585348be94 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=106 identity=43190 ipv4=10.0.0.220 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-52pjm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 8ef786cd-4c40-4ab5-b9c1-e134d35a9ad8 default }" containerID=89dbf391fb561804682d1653875c4ae4e28260d281448a26083c7de2e04e91ed datapathConfiguration="&{false false false false false }" interface=lxcf5635f618f03 k8sPodName=openstack/rook-ceph-detect-version-lfjkn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=89dbf391fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=89dbf391fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=89dbf391fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=3624 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=89dbf391fb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=236 identity=3624 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=89dbf391fb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=236 identity=3624 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=endpoint level=info msg="Successful endpoint creation" containerID=89dbf391fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=3624 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=daemon level=info msg="Delete endpoint request" containerID=89dbf391fb endpointID=236 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-lfjkn subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=d597c409-756a-4ce4-8e1c-8f975bd82f76 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=89dbf391fb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=236 identity=3624 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/rook-ceph-detect-version-lfjkn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 5d67c649-aecb-4049-9bee-127c0934dedf default }" containerID=aeba45bde51404309df96fb868fed60348ad13faaf411e26a203c4405ffe69b8 datapathConfiguration="&{false false false false false }" interface=lxc4b9cabb9d631 k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeba45bde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aeba45bde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aeba45bde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=11471 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeba45bde5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=498 identity=11471 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aeba45bde5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=498 identity=11471 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeba45bde5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=11471 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aeba45bde5 endpointID=498 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-r6rq6 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=a8883a73-ee9f-424d-9f00-11d736a866cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=aeba45bde5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=498 identity=11471 ipv4=10.0.0.71 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-r6rq6 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.34 fe0f4936-e457-4c2f-b8ed-58fef85f0386 default }" containerID=20ced22ce4745b7755eba50490424e96535f9add1f7ee27ff1c6bd26c5418e79 datapathConfiguration="&{false false false false false }" interface=lxcdbbd130bcfab k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20ced22ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20ced22ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20ced22ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=49542 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20ced22ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3345 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20ced22ce4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3345 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=endpoint level=info msg="Successful endpoint creation" containerID=20ced22ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=daemon level=info msg="Delete endpoint request" containerID=20ced22ce4 endpointID=3345 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=20ced22ce4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3345 identity=49542 ipv4=10.0.0.34 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-10c5c452-e51f-4948-9d07-a6f7b3a32732 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.15 49cc1067-1f4c-4c92-bb23-7ef42881dc59 default }" containerID=c1afeac0a3da40392bc265acbae4ba87f423c56fef1762cd55ef60881e324989 datapathConfiguration="&{false false false false false }" interface=lxc46164c956a00 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1afeac0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1afeac0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1afeac0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=4332 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1afeac0a3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=4332 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1afeac0a3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=904 identity=4332 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1afeac0a3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=904 identity=4332 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.189 202a9dca-1979-4b71-9118-6d03eaaa5589 default }" containerID=b3b6b9eed53a015965804d046cfb75cad519a5326f28feb4d9fd71832bd82643 datapathConfiguration="&{false false false false false }" interface=lxc5a972193b824 k8sPodName=openstack/glance-db-init-q9h6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3b6b9eed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3b6b9eed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3b6b9eed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=17907 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3b6b9eed5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1453 identity=17907 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b3b6b9eed5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1453 identity=17907 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3b6b9eed5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=17907 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=daemon level=info msg="Delete endpoint request" containerID=b3b6b9eed5 endpointID=1453 k8sNamespace=openstack k8sPodName=glance-db-init-q9h6k subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=8c3cecb6-0acd-402f-b3d3-6cf139d019c9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b3b6b9eed5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1453 identity=17907 ipv4=10.0.0.189 ipv6= k8sPodName=openstack/glance-db-init-q9h6k subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e98502ff-4041-4fa3-8bcb-4c15b8ff5123 default }" containerID=a993d8ebfb079cc361fc8ebf240a7232a2dcdcb05eae70fa10a563cb8fd6ff2d datapathConfiguration="&{false false false false false }" interface=lxc82f9a3f60378 k8sPodName=openstack/glance-db-sync-tz9d8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a993d8ebfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a993d8ebfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5144edea-33b5-4bc2-9977-090086379adb,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5144edea-33b5-4bc2-9977-090086379adb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5144edea-33b5-4bc2-9977-090086379adb;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=5144edea-33b5-4bc2-9977-090086379adb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a993d8ebfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=15609 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5144edea-33b5-4bc2-9977-090086379adb,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5144edea-33b5-4bc2-9977-090086379adb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a993d8ebfb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=741 identity=15609 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a993d8ebfb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=741 identity=15609 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a993d8ebfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=15609 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.66 49a758f8-a7c8-4bfa-bf26-850e39d083ee default }" containerID=201527053c87b9a3a1f9e4da17db0e528be720ab2ca7d674ce83d924e4ec0bdd datapathConfiguration="&{false false false false false }" interface=lxc8a850d0922d8 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=201527053c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=201527053c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=201527053c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=5222 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=201527053c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3041 identity=5222 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.122 c9107c63-bf87-4a5e-b13e-9fd50b45f3aa default }" containerID=a8c4a3d2cee8378ae82b21d2b928871c7b7d2bd132e93da395f415992ac71e39 datapathConfiguration="&{false false false false false }" interface=lxcd8b7bb519e98 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8c4a3d2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8c4a3d2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a8c4a3d2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=5769 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8c4a3d2ce datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2743 identity=5769 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=201527053c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3041 identity=5222 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn subsys=endpoint level=info msg="Successful endpoint creation" containerID=201527053c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3041 identity=5222 ipv4=10.0.0.66 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-btvcn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a8c4a3d2ce datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2743 identity=5769 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8c4a3d2ce datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2743 identity=5769 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-srx4b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a993d8ebfb endpointID=741 k8sNamespace=openstack k8sPodName=glance-db-sync-tz9d8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5144edea-33b5-4bc2-9977-090086379adb k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=5144edea-33b5-4bc2-9977-090086379adb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=a993d8ebfb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=741 identity=15609 ipv4=10.0.0.96 ipv6= k8sPodName=openstack/glance-db-sync-tz9d8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 b7567304-e1ea-4980-a385-4f7cdc12b3d8 default }" containerID=f496d2ee7186e16994887e6d834ae74738248af564e5dcd1730797aab1b383d0 datapathConfiguration="&{false false false false false }" interface=lxc6b61668e6ba7 k8sPodName=openstack/glance-rabbit-init-48tsp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=34256 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2260 identity=34256 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f496d2ee71 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2260 identity=34256 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=endpoint level=info msg="Successful endpoint creation" containerID=f496d2ee71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=34256 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f496d2ee71 endpointID=2260 k8sNamespace=openstack k8sPodName=glance-rabbit-init-48tsp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=79a4c0eb-af67-4061-ad96-edef656c9302 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f496d2ee71 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2260 identity=34256 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/glance-rabbit-init-48tsp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 b46d07dd-9dd3-4903-8233-fbb60c2bb049 default }" containerID=16ed9ac284dc72dc75c145fe7ec1807557ba029cce02aef62899b378f7063b33 datapathConfiguration="&{false false false false false }" interface=lxc9e9f884ffc07 k8sPodName=openstack/glance-ks-service-xr9wx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=16ed9ac284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=16ed9ac284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2080756-c767-455a-8f1a-c23050697810,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f2080756-c767-455a-8f1a-c23050697810,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f2080756-c767-455a-8f1a-c23050697810;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=f2080756-c767-455a-8f1a-c23050697810;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=16ed9ac284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=49933 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f2080756-c767-455a-8f1a-c23050697810,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=f2080756-c767-455a-8f1a-c23050697810,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=16ed9ac284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1615 identity=49933 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=16ed9ac284 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1615 identity=49933 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=endpoint level=info msg="Successful endpoint creation" containerID=16ed9ac284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=49933 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=daemon level=info msg="Delete endpoint request" containerID=16ed9ac284 endpointID=1615 k8sNamespace=openstack k8sPodName=glance-ks-service-xr9wx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f2080756-c767-455a-8f1a-c23050697810 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=f2080756-c767-455a-8f1a-c23050697810 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=16ed9ac284 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1615 identity=49933 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/glance-ks-service-xr9wx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 5db20a8c-0c1b-41e0-8e43-17e83b11d373 default }" containerID=d2b0d68e8bd6f041f277cf8b2b395d54f8886bdb21e2e9bfb10372db975ad609 datapathConfiguration="&{false false false false false }" interface=lxc9932ee65e47a k8sPodName=openstack/glance-ks-endpoints-b8qnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2b0d68e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2b0d68e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2b0d68e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=15919 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d2b0d68e8b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1157 identity=15919 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2b0d68e8b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1157 identity=15919 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2b0d68e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1157 identity=15919 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d2b0d68e8b endpointID=1157 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-b8qnk subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d190720b-fb63-460b-97b3-87053b8e47cf k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d2b0d68e8b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1157 identity=15919 ipv4=10.0.0.32 ipv6= k8sPodName=openstack/glance-ks-endpoints-b8qnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 f48b17e7-8a22-424e-a796-8e531b2d5388 default }" containerID=0dec95b92f1cd93cfd0126c26b0145318365b12784d60d76eab9e99292ebff98 datapathConfiguration="&{false false false false false }" interface=lxce6c0ded83763 k8sPodName=openstack/glance-ks-user-zh54b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0dec95b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0dec95b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0dec95b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=22816 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0dec95b92f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2760 identity=22816 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0dec95b92f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2760 identity=22816 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=endpoint level=info msg="Successful endpoint creation" containerID=0dec95b92f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=22816 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=daemon level=info msg="Delete endpoint request" containerID=0dec95b92f endpointID=2760 k8sNamespace=openstack k8sPodName=glance-ks-user-zh54b subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e5fbb1ba-0a8e-4734-8af6-f2ed9172e9eb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=0dec95b92f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2760 identity=22816 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/glance-ks-user-zh54b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.252 8541202d-597c-4226-a91a-021192e66232 default }" containerID=7a32d4832a6f7e9e101f310d7ab314d306fb4dd10ed441084c4a34a33029952a datapathConfiguration="&{false false false false false }" interface=lxc77edc4115722 k8sPodName=openstack/glance-metadefs-load-88gvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a32d4832a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a32d4832a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a32d4832a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=9842 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a32d4832a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=331 identity=9842 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=7a32d4832a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=331 identity=9842 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a32d4832a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=9842 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=daemon level=info msg="Delete endpoint request" containerID=7a32d4832a endpointID=331 k8sNamespace=openstack k8sPodName=glance-metadefs-load-88gvm subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=4c675ffe-53fe-43b8-b6b8-25f01afbe535 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7a32d4832a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=331 identity=9842 ipv4=10.0.0.252 ipv6= k8sPodName=openstack/glance-metadefs-load-88gvm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 b1061cb4-58d6-4011-b8a1-ca3a3d0e3bb7 default }" containerID=457a631c49e3c82dff74f9a4d1e18e5687503a02d8a52e5f1027e6beb85d238c datapathConfiguration="&{false false false false false }" interface=lxc90f3f4f2ca9d k8sPodName=openstack/glance-storage-init-8mcg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=457a631c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=457a631c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8bd12416-1046-4674-945c-d0ee82405b27,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8bd12416-1046-4674-945c-d0ee82405b27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8bd12416-1046-4674-945c-d0ee82405b27;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=8bd12416-1046-4674-945c-d0ee82405b27;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=457a631c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=2612 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8bd12416-1046-4674-945c-d0ee82405b27,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=8bd12416-1046-4674-945c-d0ee82405b27,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=457a631c49 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=148 identity=2612 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=457a631c49 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=148 identity=2612 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=457a631c49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=148 identity=2612 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=daemon level=info msg="Delete endpoint request" containerID=457a631c49 endpointID=148 k8sNamespace=openstack k8sPodName=glance-storage-init-8mcg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8bd12416-1046-4674-945c-d0ee82405b27 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=8bd12416-1046-4674-945c-d0ee82405b27 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=457a631c49 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=148 identity=2612 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/glance-storage-init-8mcg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 4395c80c-d92c-4867-881d-f051a0eb7756 default }" containerID=7c7fb39b3156bedbb5060c9490e17ebf7454a084b9d27e08f99bcddba0aee601 datapathConfiguration="&{false false false false false }" interface=lxcaed1d78a7722 k8sPodName=openstack/glance-api-597b5855b5-xxrn5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=11851 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=110 identity=11851 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c7fb39b31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=110 identity=11851 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c7fb39b31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=110 identity=11851 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/glance-api-597b5855b5-xxrn5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.137 9618f3ac-f8e2-489d-b89f-6fe4772c2cb5 default }" containerID=925cb420b0fa9c65b81f8680bc0ba672df592f807ee3b9c485c58ed162e1683f datapathConfiguration="&{false false false false false }" interface=lxc736a184cc934 k8sPodName=openstack/staffeln-db-init-jmd62 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=925cb420b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=925cb420b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=925cb420b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=10927 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=925cb420b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=678 identity=10927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=925cb420b0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=678 identity=10927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=endpoint level=info msg="Successful endpoint creation" containerID=925cb420b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=10927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 5beabd25-d196-4f46-aa9e-9d3d1fdda4b8 default }" containerID=d67b5d4d93447c9677d6ef251c9d148c600e09c6e21de66fa1ea85914d10c757 datapathConfiguration="&{false false false false false }" interface=lxc8a5c9e27b6a7 k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d67b5d4d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2657 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d67b5d4d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2657 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d67b5d4d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2657 identity=7066 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d67b5d4d93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2657 identity=7066 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 94a0b951-31cd-4fdc-963d-55d986f11d27 default }" containerID=cdb44d835dbb459c86d44423c0b24a43901d290186bd84495cf6d215d8eaf66b datapathConfiguration="&{false false false false false }" interface=lxceaba1a13fa3a k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdb44d835d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdb44d835d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdb44d835d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=38355 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdb44d835d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=38355 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d67b5d4d93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2657 identity=7066 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d67b5d4d93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2657 identity=7066 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/staffeln-api-5876fcd96d-lqtkm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cdb44d835d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=9 identity=38355 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdb44d835d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=9 identity=38355 ipv4=10.0.0.233 ipv6= k8sPodName=openstack/staffeln-conductor-f46c87787-5dxxt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=925cb420b0 endpointID=678 k8sNamespace=openstack k8sPodName=staffeln-db-init-jmd62 subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=a8387fd0-1e94-4a07-a449-ee2326f2706b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=925cb420b0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=678 identity=10927 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/staffeln-db-init-jmd62 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.129 d7c5c5a3-299e-4aa9-87ae-8e223020ba48 default }" containerID=6bad18729686e971dcaa6c7e9761c0b46e99ce194912a883d224b11252eda052 datapathConfiguration="&{false false false false false }" interface=lxc64a22acd545f k8sPodName=openstack/staffeln-db-sync-hqf7t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bad187296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bad187296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6bad187296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=54936 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=f90fe741-5cbf-4581-b9b6-fa383b297b1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bad187296 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=290 identity=54936 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bad187296 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=290 identity=54936 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bad187296 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=290 identity=54936 ipv4=10.0.0.129 ipv6= k8sPodName=openstack/staffeln-db-sync-hqf7t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager