level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="909.985µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="43.921µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="792.991µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="8.48µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=101.544774ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="12.371µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="17.681µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="66.172µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="69.852µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="97.273µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="412.322µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.05µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=6.990053ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.089168ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="37.241µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="147.584µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="326.739µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="120.393µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="98.422µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=52.283814ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="174.984µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.601µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="5.561µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.230.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.998682ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.09µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=101.019979ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=101.104711ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="1.43µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.26µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.67µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="22.001µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="14.17µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="57.631µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="224.246µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="1.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="6.43µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="140.394µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="641.837µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration="727.64µs" function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="5.87µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="13.491µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.230 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.230 ipAddr.ipv6="" k8sNodeIP=199.19.213.230 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.230" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.19" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.230" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.230} {CiliumInternalIP 10.0.0.19}] 10.0.0.0/24 [] [] 10.0.0.220 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers: openstack-compute-node:enabled openstack-control-plane:enabled openvswitch:enabled] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46823" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.463129282s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="13.451µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="6.32µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="27.43µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="2.39µs" function="*job.group.Start" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2218 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.437785954s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.58 8fcbb60d-501f-44db-83bc-261e15727c06 default }" containerID=1ab81f49392a17473e8e5e1884752eccf46f93db61d750bfb78c01b7f2b08f5f datapathConfiguration="&{false false false false false }" interface=lxc9c337f4eddab k8sPodName=kube-system/coredns-67659f764b-k64qr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1ab81f4939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1ab81f4939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1ab81f4939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=25203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1ab81f4939 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=795 identity=25203 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=312.446737ms file-path=/var/run/cilium/state/templates/9f14f69feb2fce084ce2e3685a1d12c1d968510782b42bff42cee5e11404615d/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.161 e717c1f2-568a-42c4-9078-c8bddb946678 default }" containerID=d00af7f5dd5d704306eead1fcc532bda8b53902771ad8eabb793d0f151b52fe0 datapathConfiguration="&{false false false false false }" interface=lxc463a961dbf37 k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.56 45a434a3-0a58-4802-8c21-16ded50ebe3e default }" containerID=48002d31e03669c71ac8d0f26c2e16a842aec477623edd5bbab112d66798d4a3 datapathConfiguration="&{false false false false false }" interface=lxc248a279df1c0 k8sPodName=kube-system/coredns-7c96b6546b-9jzmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d00af7f5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q subsys=endpoint level=info msg="New endpoint" containerID=48002d31e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.96 e148b98d-2c66-4cee-91af-67cf14a07727 default }" containerID=4c0e515aec587268ffd6579ca7e8a9ffaf878840cbb81f9308048eb0edb2ffa4 datapathConfiguration="&{false false false false false }" interface=lxc44e842ee4977 k8sPodName=kube-system/coredns-67659f764b-lxxwc labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=d00af7f5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q subsys=endpoint level=info msg="New endpoint" containerID=4c0e515aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=4c0e515aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4c0e515aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=25203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c0e515aec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3347 identity=25203 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48002d31e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=endpoint level=info msg="Identity of endpoint changed" containerID=48002d31e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=25203 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48002d31e0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=639 identity=25203 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d00af7f5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=46127 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d00af7f5dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1716 identity=46127 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.103 cd5fd05d-273e-4cc7-b10e-0b12429b31c4 default }" containerID=58724ddccb56218c21d496b15f815b5061464af6a54f38dc042d1981ec105a87 datapathConfiguration="&{false false false false false }" interface=lxc0b7035d72d28 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.150 59def6d2-c45e-4bbe-96f7-2c3e690a96b3 default }" containerID=a502ba7d5ab2556d9963dc093ab71d1ddad9d82d6c0d11377b43efa30f9fae0c datapathConfiguration="&{false false false false false }" interface=lxc9027891859d0 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.49 94669e65-f10b-4e55-b295-93e61a84d473 default }" containerID=401f06e095a50581fddb708caf07fc90e98193063f9871caf79c2f35a0182f32 datapathConfiguration="&{false false false false false }" interface=lxcaa9c42232727 k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 subsys=endpoint level=info msg="New endpoint" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.192 45974e04-ba40-42a6-82a5-7dd8a2d4a72b default }" containerID=b74d0a41dd4cf6cbd1df7d4cc5696a7155fc1699dec6632ec109a82da67852aa datapathConfiguration="&{false false false false false }" interface=lxc56a724c18f0e k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2218 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 ipv4=10.0.0.220 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identityLabels="reserved:health" ipv4=10.0.0.220 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=207 identity=4 identityLabels="reserved:health" ipv4=10.0.0.220 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k line=611 subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=1.106008999s file-path=/var/run/cilium/state/templates/484ba25cba9b8ee6cf8745e3d79cb46d5bac175d7131315fa9bf35886fb0b1bd/bpf_lxc.o subsys=datapath-loader level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=23639 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1071 identity=23639 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4c0e515aec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3347 identity=25203 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c0e515aec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3347 identity=25203 ipv4=10.0.0.96 ipv6= k8sPodName=kube-system/coredns-67659f764b-lxxwc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=48002d31e0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=639 identity=25203 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=48002d31e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=25203 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=207 identity=4 ipv4=10.0.0.220 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1ab81f4939 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=795 identity=25203 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr subsys=endpoint level=info msg="Successful endpoint creation" containerID=1ab81f4939 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=795 identity=25203 ipv4=10.0.0.58 ipv6= k8sPodName=kube-system/coredns-67659f764b-k64qr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d00af7f5dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1716 identity=46127 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q subsys=endpoint level=info msg="Successful endpoint creation" containerID=d00af7f5dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1716 identity=46127 ipv4=10.0.0.161 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-7kg6q subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=58724ddccb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1071 identity=23639 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k subsys=endpoint level=info msg="Successful endpoint creation" containerID=58724ddccb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1071 identity=23639 ipv4=10.0.0.103 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-7tr9k subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identity=14733 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=699 identity=14733 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a502ba7d5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=699 identity=14733 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a502ba7d5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=699 identity=14733 ipv4=10.0.0.150 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-pghc8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=33904 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3066 identity=33904 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Rewrote endpoint BPF program" containerID=401f06e095 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3066 identity=33904 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=endpoint level=info msg="Successful endpoint creation" containerID=401f06e095 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3066 identity=33904 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=daemon level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=40062 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1442 identity=40062 ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b74d0a41dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1442 identity=40062 ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x subsys=endpoint level=info msg="Successful endpoint creation" containerID=b74d0a41dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1442 identity=40062 ipv4=10.0.0.192 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-nbm7x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48002d31e0 endpointID=639 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9jzmn subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=48002d31e0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=639 identity=25203 ipv4=10.0.0.56 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9jzmn subsys=endpoint level=info msg="Delete endpoint request" containerID=401f06e095 endpointID=3066 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-tbsmj subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=461a8a07-c8fd-43bf-a24e-770fa7a9b7ec k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=401f06e095 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3066 identity=33904 ipv4=10.0.0.49 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-tbsmj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 90258828-7432-4fcc-adf3-91f2f9d29900 default }" containerID=aeb493e3b2ebb384805801a50048413416ade93deb6f7d6a78c50395fdf01d01 datapathConfiguration="&{false false false false false }" interface=lxc2cbf5df88f80 k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=20606 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1949 identity=20606 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aeb493e3b2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1949 identity=20606 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=aeb493e3b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1949 identity=20606 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=aeb493e3b2 endpointID=1949 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-mwv9c subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=9f7550d3-9ae6-40d6-90fe-7ce1ef3ab18b k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=aeb493e3b2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1949 identity=20606 ipv4=10.0.0.117 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-mwv9c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.178 6a993c11-e62c-4457-9fbb-ddd6d46c3450 default }" containerID=18bf9b4200fcd53cb8859840946cf46bc1e3580dce32a86ef27427493ea51821 datapathConfiguration="&{false false false false false }" interface=lxc0f7a2707b88d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=44532 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2753 identity=44532 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18bf9b4200 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2753 identity=44532 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv subsys=endpoint level=info msg="Successful endpoint creation" containerID=18bf9b4200 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2753 identity=44532 ipv4=10.0.0.178 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-2m6gv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.144 6ab11d04-918b-45ca-9433-40f51fe654d5 default }" containerID=6841939b593afed81245a11719502b89cbe79f7fd3cbe09cde5bdec67d30cec4 datapathConfiguration="&{false false false false false }" interface=lxc1088f7c0e841 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6841939b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6841939b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=82368811-48f1-462c-be2e-177c598bcea4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=82368811-48f1-462c-be2e-177c598bcea4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=82368811-48f1-462c-be2e-177c598bcea4;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=82368811-48f1-462c-be2e-177c598bcea4;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6841939b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=12090 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=82368811-48f1-462c-be2e-177c598bcea4,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=82368811-48f1-462c-be2e-177c598bcea4,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6841939b59 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=12090 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6841939b59 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2780 identity=12090 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6841939b59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2780 identity=12090 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6841939b59 endpointID=2780 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-wmnk2 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=82368811-48f1-462c-be2e-177c598bcea4 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=82368811-48f1-462c-be2e-177c598bcea4 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=6841939b59 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2780 identity=12090 ipv4=10.0.0.144 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-wmnk2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 dd82e927-0e19-47c6-8e73-817455698741 default }" containerID=def2b8b1b6d26b31de1d2fbb781d3561848e2dd2f5771c7a696d1e24defa4a67 datapathConfiguration="&{false false false false false }" interface=lxcc7cc8b0d7fba k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=def2b8b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=def2b8b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=def2b8b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=26192 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=def2b8b1b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=26192 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=def2b8b1b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3661 identity=26192 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=def2b8b1b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3661 identity=26192 ipv4=10.0.0.92 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-n8xhb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.57 62d11097-b5f3-4a1e-beeb-f7ce472d78d7 default }" containerID=9e855af1e4f521fb3ece730e454d689a1cbf8c548402b74a55883f850a2e65c8 datapathConfiguration="&{false false false false false }" interface=lxc0963b1336370 k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e855af1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e855af1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e855af1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=8869 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e855af1e4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3428 identity=8869 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e855af1e4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3428 identity=8869 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e855af1e4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3428 identity=8869 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-mkl6s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.196 b9451a1f-a6f2-422b-ae29-9219c45b6761 default }" containerID=202e036b861d4fc523afd54f3cc0ea7c2640f920b24c09adffb585d63a0447d9 datapathConfiguration="&{false false false false false }" interface=lxcba8fa885f6df k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=202e036b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=202e036b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=202e036b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=2541 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=202e036b86 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2019 identity=2541 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=202e036b86 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2019 identity=2541 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=202e036b86 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2019 identity=2541 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-7snzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 992b1504-ecd8-48fe-8ab3-ae08c59b27a9 default }" containerID=db4aa25eeafb569ea9b8304962e2fdf0bf9934ecf29af2c6c258810f128f8061 datapathConfiguration="&{false false false false false }" interface=lxcb6a4701a24e5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=1938 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1049 identity=1938 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 1caf820f-44ba-4343-96af-036c3546786c default }" containerID=7ef74994ebb308bdf8f3d9190eb7cb30d65911046971f3ff706a80cf76a463ba datapathConfiguration="&{false false false false false }" interface=lxc63005219eb98 k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ef74994eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ef74994eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ef74994eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ef74994eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2751 identity=11856 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=db4aa25eea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1049 identity=1938 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db4aa25eea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1049 identity=1938 ipv4=10.0.0.248 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ef74994eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2751 identity=11856 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ef74994eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2751 identity=11856 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7ef74994eb endpointID=2751 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7ef74994eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2751 identity=11856 ipv4=10.0.0.22 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-58fe45d6-f24f-41b6-a9e3-6e77e76b263f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 a1c8bad5-d87a-40ad-b1e0-28d5bca87406 default }" containerID=14e2dbdfc5a14193a3f6d0134e652164a398a21672c52dbc21c5dea6b975358b datapathConfiguration="&{false false false false false }" interface=lxc6875067732d3 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14e2dbdfc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14e2dbdfc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14e2dbdfc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=17446 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14e2dbdfc5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3871 identity=17446 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14e2dbdfc5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3871 identity=17446 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14e2dbdfc5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3871 identity=17446 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 4428cd62-66ec-412f-baff-42b695dab6aa default }" containerID=ea2f481299a19f09f5b246f507a71909678c976aceadf452dd0aad4f5cf80fa3 datapathConfiguration="&{false false false false false }" interface=lxc73a466ae205f k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea2f481299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea2f481299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ea2f481299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=2683 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea2f481299 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3600 identity=2683 ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ea2f481299 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3600 identity=2683 ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea2f481299 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3600 identity=2683 ipv4=10.0.0.73 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.193 935fa02b-b621-40ae-82fe-92aa209d670d default }" containerID=57754adf2ceb8af5ad96a4a9f44a09102dda8b223a43d72f884dc1a6f9b1971c datapathConfiguration="&{false false false false false }" interface=lxc2bce94317eb4 k8sPodName=monitoring/node-feature-discovery-worker-scqhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57754adf2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57754adf2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 804d0433-9d72-4696-a347-a94f27f72a0b default }" containerID=d7928169ddc2a46520a4a2b1d5303170d2c5a36fb0118ef209be8b7751646bde datapathConfiguration="&{false false false false false }" interface=lxcb111933c972d k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=57754adf2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=52742 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57754adf2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=949 identity=52742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq subsys=endpoint level=info msg="Invalid state transition skipped" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w line=611 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=22114 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=832 identity=22114 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=57754adf2c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=949 identity=52742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=57754adf2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=949 identity=52742 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-scqhq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d7928169dd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=832 identity=22114 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w subsys=endpoint level=info msg="Successful endpoint creation" containerID=d7928169dd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=832 identity=22114 ipv4=10.0.0.153 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-p6g4w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.45 1eff5186-8c68-4738-ae27-a86a3fd0215a default }" containerID=0484c19d3e922c8dbfed69fd4069b5540f2f449bed062df08e0e74c78c108964 datapathConfiguration="&{false false false false false }" interface=lxcb1442d890982 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0484c19d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0484c19d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0484c19d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=28406 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0484c19d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1276 identity=28406 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0484c19d3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1276 identity=28406 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl subsys=endpoint level=info msg="Successful endpoint creation" containerID=0484c19d3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1276 identity=28406 ipv4=10.0.0.45 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-rqdcl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2218 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-171-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_02218 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_02218 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_02218 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_02218:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2218 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.013215739851475105 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.250 2edfa168-4267-4774-8431-0180b6996396 default }" containerID=c88c3b64a7b00f3a85fbae5643451dffe00b686018c275a9f903611d828cc5bb datapathConfiguration="&{false false false false false }" interface=lxc6e673ccb35a7 k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c88c3b64a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c88c3b64a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c88c3b64a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=6117 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c88c3b64a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=812 identity=6117 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c88c3b64a7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=812 identity=6117 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=endpoint level=info msg="Successful endpoint creation" containerID=c88c3b64a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=812 identity=6117 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c88c3b64a7 endpointID=812 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-mgdzw subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=9ff5b364-ca6d-4afd-a503-f57ec44cddde k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=c88c3b64a7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=812 identity=6117 ipv4=10.0.0.250 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-mgdzw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 1b5c10b6-6d40-4fb0-b56c-c2cb8478ec4b default }" containerID=ef4f2d57f016af0d68cccd381185e28abaa93453c2660cf5a822217aa534f33a datapathConfiguration="&{false false false false false }" interface=lxc8715b70a98c5 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ef4f2d57f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ef4f2d57f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ef4f2d57f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=54519 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ef4f2d57f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3912 identity=54519 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 e562e66b-7955-4443-aae1-a118db733de3 default }" containerID=34fbdb448010d513b5bd0b294b81e761bb16f50c90f19bf49c065a55acc3ae7d datapathConfiguration="&{false false false false false }" interface=lxc6cb0b0bbce62 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34fbdb4480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34fbdb4480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34fbdb4480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=24478 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34fbdb4480 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1225 identity=24478 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ef4f2d57f0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3912 identity=54519 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=ef4f2d57f0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3912 identity=54519 ipv4=10.0.0.41 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-6fnrt subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=34fbdb4480 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1225 identity=24478 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm subsys=endpoint level=info msg="Successful endpoint creation" containerID=34fbdb4480 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1225 identity=24478 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-29nrm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.52 8dc34303-efc2-4d2e-be75-d676299be7c6 default }" containerID=ce00605fbbf424b6545c2d249fa48cafbbe1af5f1702baa40de5a6aec53e2a50 datapathConfiguration="&{false false false false false }" interface=lxcb4f2fc133a60 k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce00605fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce00605fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce00605fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=37172 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce00605fbb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2675 identity=37172 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce00605fbb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2675 identity=37172 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce00605fbb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2675 identity=37172 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6f595b8957-ftxjd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.149 f58dc674-d9da-4317-a051-4a9bbf60fec3 default }" containerID=3fd4019bddf4bf0fd175b89c175b99a99c4533022fa97902f7daabd29d6d8643 datapathConfiguration="&{false false false false false }" interface=lxcd17b7ef8ef5e k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3fd4019bdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3fd4019bdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3fd4019bdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=45709 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3fd4019bdd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=170 identity=45709 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3fd4019bdd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=170 identity=45709 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=endpoint level=info msg="Successful endpoint creation" containerID=3fd4019bdd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=170 identity=45709 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3fd4019bdd endpointID=170 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-74wvz subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=b1e8d50e-5d85-40d8-ba70-674877dce13f k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3fd4019bdd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=170 identity=45709 ipv4=10.0.0.149 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-74wvz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 fc7e6131-8920-4d5e-9fcf-44a91af50ed5 default }" containerID=20e4c32c6f20271c1954aa2ed3c83b196615b15227d3cfaf88b7d3af13624492 datapathConfiguration="&{false false false false false }" interface=lxc8d6ca873df3e k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=20e4c32c6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=20e4c32c6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=20e4c32c6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=20e4c32c6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=500 identity=11856 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=20e4c32c6f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=500 identity=11856 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=endpoint level=info msg="Successful endpoint creation" containerID=20e4c32c6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=11856 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 5ec89c7c-0abf-43af-bafe-347450c5f545 default }" containerID=f35319bf7dfaa0c304e1fae8c673c07cfb41aa8a302a322686b057c1aa499763 datapathConfiguration="&{false false false false false }" interface=lxceedb6a38fce5 k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f35319bf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f35319bf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f35319bf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f35319bf7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3526 identity=11856 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f35319bf7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3526 identity=11856 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f35319bf7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3526 identity=11856 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 d46c392c-963c-4e2d-9d2d-f7f21d9921a2 default }" containerID=29c0fd0d7a286070fc10a3280b71023b6ec159d2847b3411a825d18d7dd9d1ad datapathConfiguration="&{false false false false false }" interface=lxcdcc86e4762c3 k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identity=2461 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2562 identity=2461 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=29c0fd0d7a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2562 identity=2461 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=29c0fd0d7a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2562 identity=2461 ipv4=10.0.0.186 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-dksmt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.61 ce6c9c89-e45f-4fd3-99e7-54ccb79f2509 default }" containerID=c3a2450f355aebbc5816a3fb5dac02ccdc79bb055eb6bb212b302047e56a4010 datapathConfiguration="&{false false false false false }" interface=lxcffef7c86c1aa k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c3a2450f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c3a2450f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=endpoint level=info msg="Identity of endpoint changed" containerID=c3a2450f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c3a2450f35 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2809 identity=11856 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c3a2450f35 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2809 identity=11856 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=endpoint level=info msg="Successful endpoint creation" containerID=c3a2450f35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2809 identity=11856 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=20e4c32c6f endpointID=500 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=20e4c32c6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=500 identity=11856 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-577fae3d-15ae-4c05-bac6-66402092538f subsys=endpoint level=info msg="Delete endpoint request" containerID=f35319bf7d endpointID=3526 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=f35319bf7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3526 identity=11856 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e7ef1f14-0af4-4bbb-a907-ada9b2f9d552 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.108 c98647af-b49f-4200-b127-b6dc71db22e0 default }" containerID=276bdb2c1857c604a54a19120ddb24c4e999eb2591f03115bfd8305427d628ea datapathConfiguration="&{false false false false false }" interface=lxc377364e828dd k8sPodName=monitoring/vector-c2nrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=276bdb2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=276bdb2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=276bdb2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=2610 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=276bdb2c18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=716 identity=2610 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=276bdb2c18 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=716 identity=2610 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=276bdb2c18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=716 identity=2610 ipv4=10.0.0.108 ipv6= k8sPodName=monitoring/vector-c2nrq subsys=daemon level=info msg="Delete endpoint request" containerID=c3a2450f35 endpointID=2809 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=c3a2450f35 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2809 identity=11856 ipv4=10.0.0.61 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-30c3b35d-b376-4072-8b52-3d49832c211e subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.27 cd60b7bb-1dc3-4aed-8a63-d866af77f813 default }" containerID=7d4eaf099273cd0d1e84bd5bab65a4623904a3328eba3f804fa868cbcc06dc71 datapathConfiguration="&{false false false false false }" interface=lxcf21889e78c56 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7d4eaf0992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7d4eaf0992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7d4eaf0992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=35917 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7d4eaf0992 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1682 identity=35917 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7d4eaf0992 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1682 identity=35917 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7d4eaf0992 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1682 identity=35917 ipv4=10.0.0.27 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.180 369b68a6-0381-4e1d-9bf9-d95511359c4f default }" containerID=9f55a4035462f3862a25273acb4b4f2c801ebb93a150fb7060b1f17ecd417d0c datapathConfiguration="&{false false false false false }" interface=lxc14489d8b2fd4 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f55a40354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f55a40354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f55a40354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=12919 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f55a40354 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=445 identity=12919 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f55a40354 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=445 identity=12919 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f55a40354 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=445 identity=12919 ipv4=10.0.0.180 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.60 39f97b51-bbc2-4f1e-9505-cc31c57ef197 default }" containerID=d2b00f568cc2a9ea9c7191f898af1ff82efb89ca17dac2d1dc160018e77d4213 datapathConfiguration="&{false false false false false }" interface=lxc852c89ef31dc k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d2b00f568c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d2b00f568c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d2b00f568c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=43119 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d2b00f568c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1654 identity=43119 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d2b00f568c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1654 identity=43119 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d2b00f568c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1654 identity=43119 ipv4=10.0.0.60 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.28 4c673b73-f487-4c8e-89b5-8b02dd0a459f default }" containerID=dfb8c7a40b217a0e6c475e5214420c17e116bcc89bc3312508f309bff4cd5beb datapathConfiguration="&{false false false false false }" interface=lxc295feadf9bc1 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=2689 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1614 identity=2689 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dfb8c7a40b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1614 identity=2689 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=dfb8c7a40b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1614 identity=2689 ipv4=10.0.0.28 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-szmmn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.78 2b9f7f4a-9d72-44b0-ab0d-8e4de618cd70 default }" containerID=0f446f2ffa17e2d98c01afbc7cc3ad53c148811e0c8fc08911efc05abed97706 datapathConfiguration="&{false false false false false }" interface=lxc3aaf9a9a78d6 k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f446f2ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f446f2ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f446f2ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identity=23854 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f446f2ffa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1774 identity=23854 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0f446f2ffa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1774 identity=23854 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f446f2ffa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1774 identity=23854 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-bfkxq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 a923a8a2-a492-457d-9855-031466753941 default }" containerID=24fe0d0c754d7d2d30bd986c577e639307c8860c63b5481949e3ea7a7201c8ba datapathConfiguration="&{false false false false false }" interface=lxcabd4454fd6e5 k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=24fe0d0c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=24fe0d0c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=24fe0d0c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=24fe0d0c75 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=675 identity=11856 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=24fe0d0c75 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=675 identity=11856 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=endpoint level=info msg="Successful endpoint creation" containerID=24fe0d0c75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=675 identity=11856 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=daemon level=info msg="Delete endpoint request" containerID=24fe0d0c75 endpointID=675 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=24fe0d0c75 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=675 identity=11856 ipv4=10.0.0.224 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-187e5dbc-376d-48f3-a967-677a843c3e2e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.16 0e27fe1c-36fb-4c1c-a1b5-f5bc4f449a6f default }" containerID=8e5af2b279b835acd503f6839542c51b68677b845c9c18290690eab1b8ff8dc0 datapathConfiguration="&{false false false false false }" interface=lxc726d19da985c k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=30301 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3734 identity=30301 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e5af2b279 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3734 identity=30301 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e5af2b279 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3734 identity=30301 ipv4=10.0.0.16 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.25 1ac010c3-abe1-45ac-9891-25e8211205a7 default }" containerID=791daf30e1f090d51b2bcf6ee5b94ec313a01790968ccc261743e6b5b4b1b4e4 datapathConfiguration="&{false false false false false }" interface=lxcfb3f3bd4bdd5 k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=39150 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=39150 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 980b5fd1-a798-4765-8c4d-8dab1d138ea8 default }" containerID=7345273580218ef0eb453ac3e35fe0ed5ef4ce90e47c43f828c25ea8dc35e4d0 datapathConfiguration="&{false false false false false }" interface=lxc6fd2c6d2285e k8sPodName=openstack/keystone-credential-setup-5rzwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7345273580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7345273580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7345273580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=5516 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7345273580 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1018 identity=5516 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=791daf30e1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=612 identity=39150 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=791daf30e1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=612 identity=39150 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/keystone-api-6f4c55d457-shbc7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7345273580 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1018 identity=5516 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=7345273580 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1018 identity=5516 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7345273580 endpointID=1018 k8sNamespace=openstack k8sPodName=keystone-credential-setup-5rzwh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=612d4dc9-261f-4bdb-bdcf-387d0d1d5dfe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=7345273580 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1018 identity=5516 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/keystone-credential-setup-5rzwh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 4dab5a9e-5ebf-48de-b595-73ac309b9fb3 default }" containerID=f18e3d7d03ce345bb5caacb0f8d02536ae122a0d56dc365b78d90437debdb305 datapathConfiguration="&{false false false false false }" interface=lxc2cede671b0de k8sPodName=openstack/keystone-db-init-shff9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=37598 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=706 identity=37598 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f18e3d7d03 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=706 identity=37598 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f18e3d7d03 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=706 identity=37598 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f18e3d7d03 endpointID=706 k8sNamespace=openstack k8sPodName=keystone-db-init-shff9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=9407f3e4-dc31-4f4f-bf39-afa19f8a3a03 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f18e3d7d03 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=706 identity=37598 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-shff9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 b87b0637-3b82-4363-ab89-471af56cd83d default }" containerID=f9e1cc20f6e06e2813fa4b5cbbc3140bb0964fdb1dab3251f98df66aafdd80b1 datapathConfiguration="&{false false false false false }" interface=lxc95d603020058 k8sPodName=openstack/keystone-fernet-setup-q6l6v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f9e1cc20f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f9e1cc20f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f9e1cc20f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=42660 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f9e1cc20f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1146 identity=42660 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f9e1cc20f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1146 identity=42660 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=endpoint level=info msg="Successful endpoint creation" containerID=f9e1cc20f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1146 identity=42660 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=daemon level=info msg="Delete endpoint request" containerID=f9e1cc20f6 endpointID=1146 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-q6l6v subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=589dc00d-a346-47f3-88e6-a680ea6c4b3c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=f9e1cc20f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1146 identity=42660 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/keystone-fernet-setup-q6l6v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.162 1cdd120a-7ef2-4141-8692-a3c03e9c144e default }" containerID=34427182401ad3d343793937af73b6ac99846d88929774d9cce9e43209825eff datapathConfiguration="&{false false false false false }" interface=lxccb370f840533 k8sPodName=openstack/keystone-db-sync-4tnjx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3442718240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3442718240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3442718240 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3460 identity=54780 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3442718240 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3460 identity=54780 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3442718240 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3460 identity=54780 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=endpoint level=info msg="Successful endpoint creation" containerID=3442718240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=54780 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3442718240 endpointID=3460 k8sNamespace=openstack k8sPodName=keystone-db-sync-4tnjx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=97e8f3d4-dde7-487d-8455-c428b77e5dbc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3442718240 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3460 identity=54780 ipv4=10.0.0.162 ipv6= k8sPodName=openstack/keystone-db-sync-4tnjx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 2eb1d9c9-8d6d-4d50-9006-9ac1bf97f52d default }" containerID=cc5a20727ca68bc964b2468f7923023f5ab81f5d5d75b454ce2d1cc1a30331d5 datapathConfiguration="&{false false false false false }" interface=lxca6391a861374 k8sPodName=openstack/keystone-rabbit-init-shb2t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=22742 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=516 identity=22742 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc5a20727c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=516 identity=22742 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc5a20727c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=22742 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cc5a20727c endpointID=516 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-shb2t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=180e7330-3184-4af2-88d5-b63b357aa5f5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=cc5a20727c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=516 identity=22742 ipv4=10.0.0.2 ipv6= k8sPodName=openstack/keystone-rabbit-init-shb2t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.152 8806fb74-9352-47af-9b3c-1aa1625c044b default }" containerID=0ca9967c564d88d19e04852e18ade22b5fb93a58f31069f1c12b26bf82bb87fe datapathConfiguration="&{false false false false false }" interface=lxc631d9bd6eed2 k8sPodName=openstack/keystone-domain-manage-gtdfz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=26006 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=424 identity=26006 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ca9967c56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=424 identity=26006 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ca9967c56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=424 identity=26006 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ca9967c56 endpointID=424 k8sNamespace=openstack k8sPodName=keystone-domain-manage-gtdfz subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=6a80a591-4a68-4f1a-878b-ba92f5673e43 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0ca9967c56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=424 identity=26006 ipv4=10.0.0.152 ipv6= k8sPodName=openstack/keystone-domain-manage-gtdfz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.79 277df5af-87df-4a01-9506-a94b230bc3fc default }" containerID=d548d7438a9b208969ee29e6fc35d82e153f0f24da359d8f8691d05ba0cc4c23 datapathConfiguration="&{false false false false false }" interface=lxc63200b9a8d67 k8sPodName=openstack/keystone-bootstrap-bgltj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d548d7438a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d548d7438a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d548d7438a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=28516 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d548d7438a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=195 identity=28516 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d548d7438a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=195 identity=28516 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=endpoint level=info msg="Successful endpoint creation" containerID=d548d7438a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=195 identity=28516 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d548d7438a endpointID=195 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bgltj subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=5655523d-aae2-4dee-b8b9-a8020c778b37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d548d7438a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=195 identity=28516 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/keystone-bootstrap-bgltj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.62 f2102a89-3651-4107-bf14-5b0a1eff1322 default }" containerID=48319f835870e4579ebbe9f4ea5b2963a2e58c05ad22fe4a68c2b84a1660a5e5 datapathConfiguration="&{false false false false false }" interface=lxc60318dd8c665 k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48319f8358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48319f8358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48319f8358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48319f8358 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=408 identity=11856 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48319f8358 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=408 identity=11856 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=endpoint level=info msg="Successful endpoint creation" containerID=48319f8358 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=11856 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=daemon level=info msg="Delete endpoint request" containerID=48319f8358 endpointID=408 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=48319f8358 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=408 identity=11856 ipv4=10.0.0.62 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0020a059-4d80-4d52-b7b2-ea37adc2d969 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 784ef18f-9648-4673-b076-5fa5c2937db4 default }" containerID=add20f367acaf5cb07dbb3b5426f7d15a6e3150f508541dedd2bbc586e78883b datapathConfiguration="&{false false false false false }" interface=lxc6cf492f63fa8 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=add20f367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=add20f367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=add20f367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=4154 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=add20f367a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=4154 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=add20f367a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=169 identity=4154 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=add20f367a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=169 identity=4154 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 44189b2f-6caa-4aa4-b538-89d209b62399 default }" containerID=f59a6384bb69fc76964734609dfc58ae08c23f10e8f72cb12071ab683a651c7a datapathConfiguration="&{false false false false false }" interface=lxc4b771b1dcc39 k8sPodName=openstack/barbican-api-6fb866f895-7wv79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=59756 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=59756 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f59a6384bb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=108 identity=59756 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f59a6384bb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=108 identity=59756 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/barbican-api-6fb866f895-7wv79 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.29 6f397e67-b046-43fd-93f9-28f1b4a4fbbd default }" containerID=ac86901051db62d0a36f43586fe32441c5f20c9f97bea78a00c2c16fd3e61d27 datapathConfiguration="&{false false false false false }" interface=lxce1414851af66 k8sPodName=openstack/barbican-db-init-tlw2z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac86901051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac86901051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac86901051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=6298 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac86901051 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=6298 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ac86901051 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1584 identity=6298 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac86901051 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=6298 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ac86901051 endpointID=1584 k8sNamespace=openstack k8sPodName=barbican-db-init-tlw2z subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=95c92a13-ff1a-429b-8f8e-c875130903ab k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=ac86901051 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=6298 ipv4=10.0.0.29 ipv6= k8sPodName=openstack/barbican-db-init-tlw2z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 d7550d73-a48c-4585-8b83-785e5fd7e9b7 default }" containerID=d43595465104ef5e2fac3a3492b5b7f9a355cd26bde8eb805ad5259e2bf47d4e datapathConfiguration="&{false false false false false }" interface=lxc1466a0797812 k8sPodName=openstack/barbican-db-sync-krvqm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d435954651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d435954651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d435954651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=3085 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d435954651 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1905 identity=3085 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d435954651 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1905 identity=3085 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=endpoint level=info msg="Successful endpoint creation" containerID=d435954651 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=3085 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d435954651 endpointID=1905 k8sNamespace=openstack k8sPodName=barbican-db-sync-krvqm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14 k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=7cab0a81-9753-49ef-b79b-fa13f1042a14 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d435954651 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1905 identity=3085 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-db-sync-krvqm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.249 86822a07-9819-4d88-ac57-82d4f6e2773f default }" containerID=086f76eb701de22fee6f68f773a0b60e980c8952f27fa38ff70b5c14c0e5dddb datapathConfiguration="&{false false false false false }" interface=lxc78900c90906b k8sPodName=openstack/barbican-rabbit-init-ds4gm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=086f76eb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=086f76eb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=086f76eb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=54898 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=086f76eb70 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=363 identity=54898 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=086f76eb70 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=363 identity=54898 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=endpoint level=info msg="Successful endpoint creation" containerID=086f76eb70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=363 identity=54898 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=086f76eb70 endpointID=363 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-ds4gm subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249 k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=9734af70-5cbc-488a-8bb6-a17497f49249 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=086f76eb70 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=363 identity=54898 ipv4=10.0.0.249 ipv6= k8sPodName=openstack/barbican-rabbit-init-ds4gm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 11dc4f6a-9c08-4de2-93fc-03125e105f0e default }" containerID=d122eb966ce9c5cfee8e592d0d8662e9aaf2d774631fb76a98ab8aff7388c4c8 datapathConfiguration="&{false false false false false }" interface=lxcad508b4e16ae k8sPodName=openstack/barbican-ks-service-tdgvf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d122eb966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d122eb966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d122eb966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identity=2413 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d122eb966c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2911 identity=2413 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d122eb966c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2911 identity=2413 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=endpoint level=info msg="Successful endpoint creation" containerID=d122eb966c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2911 identity=2413 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d122eb966c endpointID=2911 k8sNamespace=openstack k8sPodName=barbican-ks-service-tdgvf subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=24b157b9-a6ed-43c5-9cf7-ae3b8cc98b50 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=d122eb966c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2911 identity=2413 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/barbican-ks-service-tdgvf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 959faaf0-897a-44f7-875b-37b7f1ca9455 default }" containerID=f6e94ba70b8c07efaba8f5150053bfaa49f071a5b2d8b82b961e7822ac3e2c23 datapathConfiguration="&{false false false false false }" interface=lxcf606ca23cb23 k8sPodName=openstack/barbican-ks-endpoints-7nzpv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f6e94ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f6e94ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f6e94ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=13729 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f6e94ba70b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2685 identity=13729 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f6e94ba70b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2685 identity=13729 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f6e94ba70b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2685 identity=13729 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f6e94ba70b endpointID=2685 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-7nzpv subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=fec8e318-43e5-4c8f-a70e-fffb9d3819ff k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=f6e94ba70b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2685 identity=13729 ipv4=10.0.0.181 ipv6= k8sPodName=openstack/barbican-ks-endpoints-7nzpv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.87 15bb3d0f-2edc-4846-a2b5-bffaa35ddff1 default }" containerID=1edc59d14889cdaf0fc9d7458a4b2e3c6e3d52e5428b76e6e1df48140702c74e datapathConfiguration="&{false false false false false }" interface=lxc97b4cb90ab15 k8sPodName=openstack/barbican-ks-user-64jc7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2a34290-f999-4f99-8390-36559c28e79e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b2a34290-f999-4f99-8390-36559c28e79e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=b2a34290-f999-4f99-8390-36559c28e79e;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=b2a34290-f999-4f99-8390-36559c28e79e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=60513 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=b2a34290-f999-4f99-8390-36559c28e79e,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=b2a34290-f999-4f99-8390-36559c28e79e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3013 identity=60513 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1edc59d148 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3013 identity=60513 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1edc59d148 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3013 identity=60513 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1edc59d148 endpointID=3013 k8sNamespace=openstack k8sPodName=barbican-ks-user-64jc7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=b2a34290-f999-4f99-8390-36559c28e79e k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=b2a34290-f999-4f99-8390-36559c28e79e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=1edc59d148 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3013 identity=60513 ipv4=10.0.0.87 ipv6= k8sPodName=openstack/barbican-ks-user-64jc7 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03750659434306816 newInterval=11m15s subsys=map-ct level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.100 1adfc51e-c43c-469b-9482-9653c2aed414 default }" containerID=30a64a19f88aeda63f147565f84e30367067a01bda9e4e1a5a6431107693f758 datapathConfiguration="&{false false false false false }" interface=lxc427b5d8d8a88 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=33257 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=559 identity=33257 ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=30a64a19f8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=559 identity=33257 ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs subsys=endpoint level=info msg="Successful endpoint creation" containerID=30a64a19f8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=559 identity=33257 ipv4=10.0.0.100 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-7nlrs subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.212 0cfaca1f-cc62-4fef-91ec-6798dd1eb328 default }" containerID=604a083d3839b5ae814bee3b8e513ce17ac637eab02509542aabf5fad6ec79be datapathConfiguration="&{false false false false false }" interface=lxc6e4307779002 k8sPodName=openstack/rook-ceph-detect-version-2cdgz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=604a083d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=604a083d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=604a083d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=1088 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=604a083d38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3548 identity=1088 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=604a083d38 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3548 identity=1088 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=endpoint level=info msg="Successful endpoint creation" containerID=604a083d38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3548 identity=1088 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=604a083d38 endpointID=3548 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-2cdgz subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=57cb7e5a-8c50-4b74-9f45-ebd61a45fd6d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=604a083d38 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3548 identity=1088 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rook-ceph-detect-version-2cdgz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 869b931b-c928-403e-89d7-d292e82e3eee default }" containerID=b8e06f41bebc0c5c5159991294f08dbd3072d64584238111b749ee5f46cd8525 datapathConfiguration="&{false false false false false }" interface=lxc13ebbe20b1b4 k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8e06f41be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8e06f41be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8e06f41be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=11856 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8e06f41be datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=954 identity=11856 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8e06f41be datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=954 identity=11856 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8e06f41be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=954 identity=11856 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=daemon level=info msg="Delete endpoint request" containerID=b8e06f41be endpointID=954 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b8e06f41be datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=954 identity=11856 ipv4=10.0.0.112 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-3bc38e04-d64c-4d75-8165-06bcecd8c23f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 8a1ef357-8d8d-43be-8113-57df518b159e default }" containerID=46263409aa0c1be3af34b264d36ce374709f797941be5f947a31dec3157602fe datapathConfiguration="&{false false false false false }" interface=lxc4d8b646ea513 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=21722 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=780 identity=21722 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=46263409aa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=780 identity=21722 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=46263409aa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=780 identity=21722 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.166 216ae5a8-3268-4db5-bd6e-3c686f9f795d default }" containerID=4fde03ddcd80f28ddefced2d235a51b6dfcec2433f52cbf65de864d64c779e37 datapathConfiguration="&{false false false false false }" interface=lxcf968fe1b8221 k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4fde03ddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4fde03ddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4fde03ddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=3958 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=4fde03ddcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=3958 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4fde03ddcd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=945 identity=3958 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4fde03ddcd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=945 identity=3958 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4fde03ddcd endpointID=945 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-6r2p8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=0806b545-2930-4e5b-b9a0-7e329ad6b565 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=4fde03ddcd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=945 identity=3958 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-6r2p8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.121 e9a021e9-5209-4b43-97d2-8afe817bcf4d default }" containerID=43a93a5dd749ae4799e9f86143b3fd6459d28e00e13e77ad056cc0c99a94584a datapathConfiguration="&{false false false false false }" interface=lxc8f953c3e6719 k8sPodName=openstack/glance-db-init-pb2cc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=43a93a5dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=43a93a5dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=43a93a5dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=36206 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=43a93a5dd7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=131 identity=36206 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=43a93a5dd7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=131 identity=36206 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=endpoint level=info msg="Successful endpoint creation" containerID=43a93a5dd7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=131 identity=36206 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=daemon level=info msg="Delete endpoint request" containerID=43a93a5dd7 endpointID=131 k8sNamespace=openstack k8sPodName=glance-db-init-pb2cc subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=6f52f711-58ca-4ed2-a201-9ccd08085020 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=43a93a5dd7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=131 identity=36206 ipv4=10.0.0.121 ipv6= k8sPodName=openstack/glance-db-init-pb2cc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.155 5c354b7b-784d-47f6-b4e2-8c9e4fb27ffa default }" containerID=10b36d66f16af7b2ca0ec7babc218e4df66b5595b481bd0fddd043c1499f2c5e datapathConfiguration="&{false false false false false }" interface=lxc0585450aeba3 k8sPodName=openstack/glance-db-sync-59bhp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=10b36d66f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=10b36d66f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=10b36d66f1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1936 identity=58765 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=10b36d66f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1936 identity=58765 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=10b36d66f1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1936 identity=58765 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=endpoint level=info msg="Successful endpoint creation" containerID=10b36d66f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1936 identity=58765 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=10b36d66f1 endpointID=1936 k8sNamespace=openstack k8sPodName=glance-db-sync-59bhp subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=446b6547-b87d-4860-9270-62ecea8a6aa6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=10b36d66f1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1936 identity=58765 ipv4=10.0.0.155 ipv6= k8sPodName=openstack/glance-db-sync-59bhp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.70 fa6a2272-d611-4a60-9483-42d03161006b default }" containerID=cd3a0fcf768d1fb33ad6ca348b3d770aec5f1dfde4a982ffaf5262b1899fafe7 datapathConfiguration="&{false false false false false }" interface=lxcc86e8376c020 k8sPodName=openstack/glance-rabbit-init-42d8v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=1323 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1331 identity=1323 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cd3a0fcf76 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1331 identity=1323 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=endpoint level=info msg="Successful endpoint creation" containerID=cd3a0fcf76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1331 identity=1323 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=cd3a0fcf76 endpointID=1331 k8sNamespace=openstack k8sPodName=glance-rabbit-init-42d8v subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=a1c4e4ec-a1bf-4d7c-ace2-075a4565794a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cd3a0fcf76 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1331 identity=1323 ipv4=10.0.0.70 ipv6= k8sPodName=openstack/glance-rabbit-init-42d8v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 3c0b2a13-ea61-4b7c-9f79-6f7ed369b0a6 default }" containerID=f11033ca98125eb174969c90a1276de5b826cfb8d47eaee4d5e64ecc52ba52c4 datapathConfiguration="&{false false false false false }" interface=lxc7e0d3bc1a009 k8sPodName=openstack/glance-ks-service-98f65 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f11033ca98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f11033ca98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f11033ca98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=1787 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f11033ca98 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=309 identity=1787 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f11033ca98 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=309 identity=1787 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f11033ca98 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=1787 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f11033ca98 endpointID=309 k8sNamespace=openstack k8sPodName=glance-ks-service-98f65 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=40476adf-01ee-4544-a583-bbb6c6d09695 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f11033ca98 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=309 identity=1787 ipv4=10.0.0.74 ipv6= k8sPodName=openstack/glance-ks-service-98f65 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.114 5ab9138d-9129-4886-9bac-227cd941d03d default }" containerID=d36a35a448928a598d236b5bb8bc53259b249b68929533fbb2daffa61cc837e7 datapathConfiguration="&{false false false false false }" interface=lxc0d81951ab865 k8sPodName=openstack/glance-ks-endpoints-v6bbx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d36a35a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d36a35a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d36a35a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=58664 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d36a35a448 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1017 identity=58664 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d36a35a448 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1017 identity=58664 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=endpoint level=info msg="Successful endpoint creation" containerID=d36a35a448 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1017 identity=58664 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d36a35a448 endpointID=1017 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-v6bbx subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=96336a48-ffa0-4739-b496-111cc62c2ba1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=d36a35a448 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1017 identity=58664 ipv4=10.0.0.114 ipv6= k8sPodName=openstack/glance-ks-endpoints-v6bbx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 9502fd91-8f37-4fdc-b771-bc8574cd7bb0 default }" containerID=77f416ea60b64b250ca8214b0b50dc877e6f2fc3ee242b016f1794ae7cb91264 datapathConfiguration="&{false false false false false }" interface=lxc9a771ba4ca67 k8sPodName=openstack/glance-ks-user-4nr7r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=77f416ea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=77f416ea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9366e854-8940-4266-bf50-faa38d12233a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9366e854-8940-4266-bf50-faa38d12233a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9366e854-8940-4266-bf50-faa38d12233a;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=9366e854-8940-4266-bf50-faa38d12233a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=77f416ea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=20590 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9366e854-8940-4266-bf50-faa38d12233a,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=9366e854-8940-4266-bf50-faa38d12233a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=77f416ea60 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3338 identity=20590 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=77f416ea60 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3338 identity=20590 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=endpoint level=info msg="Successful endpoint creation" containerID=77f416ea60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3338 identity=20590 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.15 c574c1b5-782a-44d1-814f-764e470e481d default }" containerID=125e3e328498b39998a6bc12fb938f0edf72904ed179ac69bf4e5a917dbb3b91 datapathConfiguration="&{false false false false false }" interface=lxc6369025f2f58 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=125e3e3284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=125e3e3284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=125e3e3284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=915 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=125e3e3284 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2355 identity=915 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=125e3e3284 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2355 identity=915 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch subsys=endpoint level=info msg="Successful endpoint creation" containerID=125e3e3284 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2355 identity=915 ipv4=10.0.0.15 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-bjrch subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.136 691c9d1f-8f3f-467d-9f8b-4aca110a302e default }" containerID=eed2a368bddee5739461c1c5f84a9d4e8f2cfe0ebe614be946b9927ae6999e32 datapathConfiguration="&{false false false false false }" interface=lxcbeaa2b46d414 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eed2a368bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eed2a368bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eed2a368bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=41520 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eed2a368bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2333 identity=41520 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eed2a368bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2333 identity=41520 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f subsys=endpoint level=info msg="Successful endpoint creation" containerID=eed2a368bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2333 identity=41520 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-g4k7f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=77f416ea60 endpointID=3338 k8sNamespace=openstack k8sPodName=glance-ks-user-4nr7r subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9366e854-8940-4266-bf50-faa38d12233a k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=9366e854-8940-4266-bf50-faa38d12233a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=77f416ea60 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3338 identity=20590 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-ks-user-4nr7r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.69 7a30d606-f728-405d-9ee2-32f3a19e873b default }" containerID=21a1518c012f0cce1a52b9818d3bbeb191aa913de637809b266062bd75da791d datapathConfiguration="&{false false false false false }" interface=lxc493983a2e0ab k8sPodName=openstack/glance-metadefs-load-zsp5t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=21a1518c01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=21a1518c01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=21a1518c01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=5438 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=21a1518c01 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3336 identity=5438 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=21a1518c01 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3336 identity=5438 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=endpoint level=info msg="Successful endpoint creation" containerID=21a1518c01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3336 identity=5438 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=21a1518c01 endpointID=3336 k8sNamespace=openstack k8sPodName=glance-metadefs-load-zsp5t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3 k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=222475b6-16a5-4cf9-9d5f-8846536c55b3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=21a1518c01 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3336 identity=5438 ipv4=10.0.0.69 ipv6= k8sPodName=openstack/glance-metadefs-load-zsp5t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.144 eb150eed-3567-4697-ba51-8c4f56f3539e default }" containerID=06a72bd9956012a58d35dbbd5a5561a4cdee3d2e81acccf05bc765bbcfd07caa datapathConfiguration="&{false false false false false }" interface=lxc31d20b7a8ba3 k8sPodName=openstack/glance-storage-init-szqgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=18894 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1584 identity=18894 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=06a72bd995 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1584 identity=18894 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=06a72bd995 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=18894 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=06a72bd995 endpointID=1584 k8sNamespace=openstack k8sPodName=glance-storage-init-szqgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=0f48fd6a-5efe-4d10-94fc-16049b507672 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=06a72bd995 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1584 identity=18894 ipv4=10.0.0.144 ipv6= k8sPodName=openstack/glance-storage-init-szqgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 fd352cb1-0fc8-4259-994e-7370ca248291 default }" containerID=2d2b699b2c5c96c7327015cf824ef6bd6b13e745bdbc6faf4360bbdd13c6099e datapathConfiguration="&{false false false false false }" interface=lxc441b5fadbc46 k8sPodName=openstack/glance-api-788bddd77b-x2ddr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d2b699b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d2b699b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d2b699b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=6896 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d2b699b2c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3319 identity=6896 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2d2b699b2c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3319 identity=6896 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d2b699b2c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3319 identity=6896 ipv4=10.0.0.9 ipv6= k8sPodName=openstack/glance-api-788bddd77b-x2ddr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.149 5f981de5-fdcb-4f10-a94b-ee670cd1ceb9 default }" containerID=e12460ba6aba3d5121f54dba221a335d6ec69cadea002d8f3b2fa6b1955e8ba6 datapathConfiguration="&{false false false false false }" interface=lxcb2a8ce608bfb k8sPodName=openstack/staffeln-api-5784899657-grwfh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e12460ba6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e12460ba6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e12460ba6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=14171 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e12460ba6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=14171 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.56 f9245ab3-5afd-4160-90b8-489e24996632 default }" containerID=a64e8dfd09f48bf1705547dc15711ad80505c508c9136cd2dfca87de0f5e10b4 datapathConfiguration="&{false false false false false }" interface=lxc605d3562c55e k8sPodName=openstack/staffeln-db-init-w5dqn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a64e8dfd09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a64e8dfd09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a64e8dfd09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=47113 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a64e8dfd09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=746 identity=47113 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e12460ba6a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=914 identity=14171 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh subsys=endpoint level=info msg="Successful endpoint creation" containerID=e12460ba6a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=914 identity=14171 ipv4=10.0.0.149 ipv6= k8sPodName=openstack/staffeln-api-5784899657-grwfh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=a64e8dfd09 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=746 identity=47113 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a64e8dfd09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=47113 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 70b03366-162f-45c4-a1f6-a761f82f917f default }" containerID=de17a8f9b85344f88a11fc9e63bcbb9a17b014757faaced30885d6927d1aecb2 datapathConfiguration="&{false false false false false }" interface=lxc414143798f19 k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=de17a8f9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=de17a8f9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=de17a8f9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=1027 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=de17a8f9b8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=1027 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=de17a8f9b8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=755 identity=1027 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=de17a8f9b8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=755 identity=1027 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/staffeln-conductor-655c7c9db-7jhkl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a64e8dfd09 endpointID=746 k8sNamespace=openstack k8sPodName=staffeln-db-init-w5dqn subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=866e5984-d694-47f1-9a73-beaebc221c0f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=a64e8dfd09 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=746 identity=47113 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/staffeln-db-init-w5dqn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 8e6aab6c-0dbe-4b25-ad4a-79b7c8ef6dac default }" containerID=3e16d2e8d2b3af5835584ce1fbdcbd3096c87efb3a14a479f25282cdf2f6f88d datapathConfiguration="&{false false false false false }" interface=lxc2094f6de1eb0 k8sPodName=openstack/staffeln-db-sync-x8rkq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3e16d2e8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3e16d2e8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3e16d2e8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=14271 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=7abc3af0-718d-4965-bcbb-b952f35e0ecc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3e16d2e8d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1128 identity=14271 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3e16d2e8d2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1128 identity=14271 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3e16d2e8d2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1128 identity=14271 ipv4=10.0.0.109 ipv6= k8sPodName=openstack/staffeln-db-sync-x8rkq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager