level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.116033ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="68.502µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.061633ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="13.53µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=104.015708ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="15.26µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.71µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="88.261µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="66.752µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="71.982µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="398.449µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="3.3µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.349129ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=11.002512ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="141.532µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="123.753µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="290.146µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="107.982µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="107.422µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.892122ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="110.162µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="33.561µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.05µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.200.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.081719ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.76µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.099815ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="4.78µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.460713ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="13.231µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.4µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="3.06µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="3.22µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="27.77µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="93.442µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="50.931µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="367.009µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.64µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.57µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="249.366µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="915.309µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.40825ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="7.29µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="32.081µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=162.253.55.200 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=162.253.55.200 ipAddr.ipv6="" k8sNodeIP=162.253.55.200 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 162.253.55.200" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.71" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 162.253.55.200" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 162.253.55.200} {CiliumInternalIP 10.0.0.71}] 10.0.0.0/24 [] [] 10.0.0.207 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:35681" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.642616607s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="24.46µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="9.35µs" function="*job.group.Start" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="44.811µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.21µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1333 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.590667158s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=293.980192ms file-path=/var/run/cilium/state/templates/081faf893b6f1076cb502dbc0499fe99708375515d8e6bcb7bd9b229bf6b6e3d/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1333 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identityLabels="reserved:health" ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=130 identity=4 identityLabels="reserved:health" ipv4=10.0.0.207 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.050057167s file-path=/var/run/cilium/state/templates/e17203534e02bd5d90506d5442287afd7c4fdd96c40bd65ad9c7ff243786dd3a/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=130 identity=4 ipv4=10.0.0.207 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.63 7d524b7a-0589-4d1f-88f2-70eb6724eca5 default }" containerID=dc20b5b76ed440269eceff1e39002c29c59cbcfe8eb7c796a14c569ccbb58f64 datapathConfiguration="&{false false false false false }" interface=lxc94be94d13b5a k8sPodName=kube-system/coredns-7c96b6546b-9j452 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc20b5b76e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc20b5b76e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc20b5b76e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=61479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc20b5b76e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1514 identity=61479 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc20b5b76e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1514 identity=61479 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc20b5b76e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1514 identity=61479 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.246 924dff2f-89c5-43e2-b0d4-f3605e1196ee default }" containerID=faf3fb20b1c0bc01bec2aae4d238dc7b77aab54d5f4910c68092aa50825b3518 datapathConfiguration="&{false false false false false }" interface=lxc19301796053b k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faf3fb20b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faf3fb20b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faf3fb20b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=23697 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faf3fb20b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1461 identity=23697 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faf3fb20b1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1461 identity=23697 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=endpoint level=info msg="Successful endpoint creation" containerID=faf3fb20b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1461 identity=23697 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=faf3fb20b1 endpointID=1461 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-mvkpg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=b9b6fd51-254f-4a2c-b96d-a4e99f0b6a5f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=faf3fb20b1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1461 identity=23697 ipv4=10.0.0.246 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-mvkpg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.203 8d304d79-2cea-4489-9a65-0c33bea6a27f default }" containerID=86e57e7df8bf10c3ac077bffb37edaf2ee0cccbd9aedb461553e18c63fbba639 datapathConfiguration="&{false false false false false }" interface=lxc5c6ade905c9d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=6144 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=6144 ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=86e57e7df8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2377 identity=6144 ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf subsys=endpoint level=info msg="Successful endpoint creation" containerID=86e57e7df8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2377 identity=6144 ipv4=10.0.0.203 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-v6cqf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1333 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01333 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01333 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01333 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01333:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1333 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.3 672561db-a0fc-432e-aeec-bdd617d3240c default }" containerID=6bf033610bbf9c65637e81c6903512b95ec27e41afa023332c6c35b983b13539 datapathConfiguration="&{false false false false false }" interface=lxc6d21eb1e74f2 k8sPodName=kube-system/coredns-67659f764b-jq4jr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6bf033610b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6bf033610b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr subsys=endpoint level=info msg="Identity of endpoint changed" containerID=6bf033610b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=61479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6bf033610b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=57 identity=61479 ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 5a51a936-cc3b-49a2-a93a-6e649d2fa69c default }" containerID=e53369992ac8a214288320489567e1d44dd4ca27e771f8c26c186f0b35d929dc datapathConfiguration="&{false false false false false }" interface=lxcfecf3576ae94 k8sPodName=kube-system/coredns-67659f764b-g5kkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e53369992a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e53369992a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e53369992a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=61479 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e53369992a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=243 identity=61479 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6bf033610b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=57 identity=61479 ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr subsys=endpoint level=info msg="Successful endpoint creation" containerID=6bf033610b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=57 identity=61479 ipv4=10.0.0.3 ipv6= k8sPodName=kube-system/coredns-67659f764b-jq4jr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e53369992a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=243 identity=61479 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=e53369992a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=243 identity=61479 ipv4=10.0.0.220 ipv6= k8sPodName=kube-system/coredns-67659f764b-g5kkg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.88 26966ed9-0062-423e-b432-f1f1a5e361ad default }" containerID=acccfa73def5c97936e6417366cc465e3df7d3712125cc8b2a07d2a91de37a9d datapathConfiguration="&{false false false false false }" interface=lxc8259844f9521 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=acccfa73de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=acccfa73de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=acccfa73de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1877 identity=32584 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=acccfa73de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1877 identity=32584 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=acccfa73de datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1877 identity=32584 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs subsys=endpoint level=info msg="Successful endpoint creation" containerID=acccfa73de datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1877 identity=32584 ipv4=10.0.0.88 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-xc8vs subsys=daemon level=info msg="Delete endpoint request" containerID=dc20b5b76e endpointID=1514 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-9j452 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=dc20b5b76e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1514 identity=61479 ipv4=10.0.0.63 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-9j452 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 3d009131-2cee-4537-afad-e67d6c33cda2 default }" containerID=b7b78d7e8db7e3bd8598f1b3681123a89fc0889c1824fadeff76d23b612d39b1 datapathConfiguration="&{false false false false false }" interface=lxc4e15779d29d2 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b7b78d7e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b7b78d7e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b7b78d7e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=20929 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b7b78d7e8d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=249 identity=20929 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.4 f60b2dee-5629-4814-9c73-a44a706057a4 default }" containerID=964fc341a8c7eb439b86499f6c3f829e171279382716fca82fa174c4f57bc0fc datapathConfiguration="&{false false false false false }" interface=lxcb29614096d21 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=964fc341a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=964fc341a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=964fc341a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=30252 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=964fc341a8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=135 identity=30252 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b7b78d7e8d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=249 identity=20929 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr subsys=endpoint level=info msg="Successful endpoint creation" containerID=b7b78d7e8d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=249 identity=20929 ipv4=10.0.0.45 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-8m4sr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.121 09b913e3-ea9b-4645-ae79-fe6b140696b0 default }" containerID=3777959b66ee628c6a52b1e1b1ce237915fdbe4026d37f073acccb54f5af3a13 datapathConfiguration="&{false false false false false }" interface=lxc393d5cebfa90 k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3777959b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3777959b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3777959b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=22013 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3777959b66 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=22013 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=964fc341a8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=135 identity=30252 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=964fc341a8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=135 identity=30252 ipv4=10.0.0.4 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-qbcw2 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3777959b66 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=940 identity=22013 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3777959b66 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=940 identity=22013 ipv4=10.0.0.121 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-5bz74 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 1b76a320-1f10-451c-8583-ab2617010219 default }" containerID=3a702cc3086cdc565960d008d6ee3e924a1dc0e35fb9aeb8463aeb1289a626f9 datapathConfiguration="&{false false false false false }" interface=lxc6eb67561997c k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a702cc308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a702cc308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a702cc308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=34878 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a702cc308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2936 identity=34878 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3a702cc308 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2936 identity=34878 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a702cc308 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2936 identity=34878 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a702cc308 endpointID=2936 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-n4xsf subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=c085d1a0-a3a7-421a-93f5-3cf4c6af7b97 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=3a702cc308 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2936 identity=34878 ipv4=10.0.0.43 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-n4xsf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 3dd05b23-0555-449b-9cc4-431ef863130b default }" containerID=c9126704c92e6b5768115899b05967baae7ebc5719a55f9c944924912a93721d datapathConfiguration="&{false false false false false }" interface=lxc6fb295dea330 k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c9126704c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c9126704c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c9126704c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=55305 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c9126704c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1283 identity=55305 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c9126704c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1283 identity=55305 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c9126704c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1283 identity=55305 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=daemon level=info msg="Delete endpoint request" containerID=c9126704c9 endpointID=1283 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-5bwj8 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c21fd62b-bfcf-4b9b-ba63-fa1143e48d8e k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=c9126704c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1283 identity=55305 ipv4=10.0.0.194 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-5bwj8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.198 fb978bfc-7b2f-43e6-bd4c-0669862b9d80 default }" containerID=a841e5f5b604b6067b9b3d9580e8ece4c823a50d1217b3220f2ff50d0d690347 datapathConfiguration="&{false false false false false }" interface=lxc5ab494861d11 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a841e5f5b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a841e5f5b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a841e5f5b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=8168 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a841e5f5b6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=204 identity=8168 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a841e5f5b6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=204 identity=8168 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a841e5f5b6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=204 identity=8168 ipv4=10.0.0.198 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mkh59 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.179 29810a38-7e56-48c9-8c54-96311b8f945a default }" containerID=228d7b30e64fbccf54899871597a1aeb4d30ba7ad1034515a156536ab3bd89e5 datapathConfiguration="&{false false false false false }" interface=lxcdb32a8aee498 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=228d7b30e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=228d7b30e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=228d7b30e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=31027 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=228d7b30e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=747 identity=31027 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=228d7b30e6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=747 identity=31027 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=228d7b30e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=747 identity=31027 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=228d7b30e6 endpointID=747 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-v79n6 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=e4681f31-1ccf-4e22-bf6b-ed7021fee9a2 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=228d7b30e6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=747 identity=31027 ipv4=10.0.0.179 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-v79n6 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ebd44611-50a3-418e-9851-dd86779f8cdd] Description:}]" policyAddRequest=7aef0511-a395-4898-b47f-e9a028367dd2 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=7aef0511-a395-4898-b47f-e9a028367dd2 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=500205dc-495e-40c1-9bc4-65726a8a4b00] Description:}]" policyAddRequest=e1630e41-aeff-4d2c-bf69-1950c55ddcf6 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=e1630e41-aeff-4d2c-bf69-1950c55ddcf6 policyRevision=3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.145 f113dc72-e1ef-4e1f-8dee-6a578a6ca6c6 default }" containerID=faef9876eb4c685ab104ee4de3e99054563eb433d9cc610e7ebd0e68332b7c5a datapathConfiguration="&{false false false false false }" interface=lxcdbf2d233ea76 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=12062 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=393 identity=12062 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=faef9876eb datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=393 identity=12062 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl subsys=endpoint level=info msg="Successful endpoint creation" containerID=faef9876eb datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=393 identity=12062 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-l7tkl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.253 8de4dc37-6bc1-46f3-938d-dbb32902f8af default }" containerID=933e550664080edad2a74932fa11ef667b9e36fd64fbd1d4df98c8dca3547b90 datapathConfiguration="&{false false false false false }" interface=lxcb8ef8d95539e k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=933e550664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=933e550664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=933e550664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identity=18641 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=933e550664 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3840 identity=18641 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=933e550664 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3840 identity=18641 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf subsys=endpoint level=info msg="Successful endpoint creation" containerID=933e550664 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3840 identity=18641 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-2rdlf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.118 7bef1b97-143f-4532-9049-cf4ce9f94a18 default }" containerID=907cdeb6189082402b6916b709cce25e08954f03fa152f0a5c671c1658ebc38f datapathConfiguration="&{false false false false false }" interface=lxced6b023d62d9 k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=35098 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=423 identity=35098 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=907cdeb618 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=423 identity=35098 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf subsys=endpoint level=info msg="Successful endpoint creation" containerID=907cdeb618 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=423 identity=35098 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-wgzbf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.251 1b8073ad-b835-47dc-bef8-6b074316305a default }" containerID=5eec01459241c822ebbe94bccee826ec7213a47650d4a80a41e0989c8d81ebe8 datapathConfiguration="&{false false false false false }" interface=lxc7b85e430d673 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5eec014592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5eec014592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5eec014592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=30375 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5eec014592 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1718 identity=30375 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5eec014592 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1718 identity=30375 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5eec014592 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1718 identity=30375 ipv4=10.0.0.251 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 0504a9ec-8b72-4d45-bc40-b495a07bd376 default }" containerID=8a04854f4e97bdb0decb88c0270d4addcab5f0a55054f920b47790d5bc43441f datapathConfiguration="&{false false false false false }" interface=lxce69dfbb578ce k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8a04854f4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8a04854f4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8a04854f4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8a04854f4e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1205 identity=41591 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8a04854f4e datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1205 identity=41591 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8a04854f4e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1205 identity=41591 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8a04854f4e endpointID=1205 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8a04854f4e datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1205 identity=41591 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d38ac13f-2a31-4d68-9314-fd382b53f645 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.171 eb54cce9-f412-4cbb-9cc2-5321106d5080 default }" containerID=b2407fef258cd6aeaa6dbffdf0457185a8a4f0260aaf160f106d105858fdf41c datapathConfiguration="&{false false false false false }" interface=lxc26589f4678a9 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2407fef25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2407fef25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b2407fef25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=63637 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b2407fef25 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4003 identity=63637 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2407fef25 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=4003 identity=63637 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2407fef25 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=4003 identity=63637 ipv4=10.0.0.171 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=a6fd8701-1dc8-42c0-ac13-c00b2f971041] Description:}]" policyAddRequest=f900bffd-ff09-4501-ac91-2fca5c4dac4e subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=f900bffd-ff09-4501-ac91-2fca5c4dac4e policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.124 fe1636ea-3568-4abd-90c4-f6ebbe55a5ea default }" containerID=b501bc70214eeb8727601c2474aebc0b32072f08c813b414f7207a0d1715f24c datapathConfiguration="&{false false false false false }" interface=lxcdb3a08a870b0 k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b501bc7021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b501bc7021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b501bc7021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b501bc7021 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=824 identity=41591 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b501bc7021 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=824 identity=41591 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b501bc7021 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=824 identity=41591 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=daemon level=info msg="Delete endpoint request" containerID=b501bc7021 endpointID=824 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b501bc7021 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=824 identity=41591 ipv4=10.0.0.124 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-8b52be12-b306-4bbf-b130-389d95613ad5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.40 88bcf164-d86d-484e-a0b1-a9ec6f8cba7c default }" containerID=a3826e6d8812ab73eaaa6f2b175700dd3f94728d1a1aa8d3bdd45747bbc358a2 datapathConfiguration="&{false false false false false }" interface=lxc93c20bcdfe92 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a3826e6d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a3826e6d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a3826e6d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=12102 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a3826e6d88 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=299 identity=12102 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a3826e6d88 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=299 identity=12102 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a3826e6d88 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=299 identity=12102 ipv4=10.0.0.40 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=2dea030b-742d-4bf1-86fa-c604d865f31f] Description:}]" policyAddRequest=aaba5a67-25e8-402d-b953-0bcdc046f2eb subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=aaba5a67-25e8-402d-b953-0bcdc046f2eb policyRevision=5 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.237 aeb3491f-d8ed-4726-880a-41dd5527b389 default }" containerID=11e31727de280e6c0fe8dd1f78d5281b77c8aedda76bded1383c6a6f463d2285 datapathConfiguration="&{false false false false false }" interface=lxc7299797df678 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11e31727de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11e31727de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11e31727de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=46061 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11e31727de datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=132 identity=46061 ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11e31727de datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=132 identity=46061 ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11e31727de datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=132 identity=46061 ipv4=10.0.0.237 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.010429207190877487 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.150 dc8a87da-bb05-4035-8043-e458468d2a15 default }" containerID=b1c8240098f7749bc64000875f8d569b6e35f63764a0e7f2064ffd59832dcec6 datapathConfiguration="&{false false false false false }" interface=lxca4377d7b5589 k8sPodName=monitoring/node-feature-discovery-worker-c64x8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1c8240098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1c8240098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1c8240098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=34038 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1c8240098 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2985 identity=34038 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.29 856440ad-6b36-4971-bfea-c2a20ad2ba37 default }" containerID=cbe3d8f1118c95db2be43a50eaf736074df228f39c4582986d90886602a2b787 datapathConfiguration="&{false false false false false }" interface=lxc102ea3f37cdc k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.252 f3ad3fca-ac9c-4314-a9ce-4c48106316a8 default }" containerID=f825e211a4e86a2adab88e27beec7b9039f9557f9732200cc6c83de216995153 datapathConfiguration="&{false false false false false }" interface=lxc0dfa8d50417e k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f825e211a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq subsys=endpoint level=info msg="New endpoint" containerID=cbe3d8f111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f825e211a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=cbe3d8f111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f825e211a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=10801 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=f825e211a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=859 identity=10801 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cbe3d8f111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=10046 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cbe3d8f111 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=885 identity=10046 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b1c8240098 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2985 identity=34038 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1c8240098 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2985 identity=34038 ipv4=10.0.0.150 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-c64x8 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f825e211a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=859 identity=10801 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq subsys=endpoint level=info msg="Successful endpoint creation" containerID=f825e211a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=859 identity=10801 ipv4=10.0.0.252 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-n8pfq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cbe3d8f111 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=885 identity=10046 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=cbe3d8f111 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=885 identity=10046 ipv4=10.0.0.29 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-kzcgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.248 4bbbbe66-6b6b-4a4a-8a1e-4c8ef7037093 default }" containerID=b11d22120697df7b74ca2f520ca0d8c77cfea409a2ba17d31831b1bbc4f1d2f3 datapathConfiguration="&{false false false false false }" interface=lxc22a90aa39736 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b11d221206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b11d221206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b11d221206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=3798 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b11d221206 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2422 identity=3798 ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b11d221206 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2422 identity=3798 ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b11d221206 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2422 identity=3798 ipv4=10.0.0.248 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-87lx8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1333 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-173-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01333 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01333 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01333 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01333:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1333 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.131 6d0d592d-4896-49f3-8bf5-a7d46aa57a7a default }" containerID=fd712814cbc18e423005150f0cf53d94cbc7877fad33c096b88c67672e6a3d34 datapathConfiguration="&{false false false false false }" interface=lxc0c72a9cbb5b8 k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fd712814cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fd712814cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fd712814cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identity=26176 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fd712814cb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2942 identity=26176 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fd712814cb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2942 identity=26176 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fd712814cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2942 identity=26176 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fd712814cb endpointID=2942 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-ntxf9 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=0af2fb49-3b04-478a-8415-2ebb44f01a68 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=fd712814cb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2942 identity=26176 ipv4=10.0.0.131 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-ntxf9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 f487c6d8-d857-40ee-bbab-1d0d3204eef2 default }" containerID=a5d9d364d139cd70266b27e3e34c6cdc6410cf73fb288812aa5889b9141eb099 datapathConfiguration="&{false false false false false }" interface=lxca41cb4762187 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a5d9d364d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a5d9d364d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.174 f69c09db-36c5-480f-ad23-9ea68125443e default }" containerID=d79b0a25050f3fd3f861dcefbcba688d3e6a6e7eb2308d5c9dda5bf64618922f datapathConfiguration="&{false false false false false }" interface=lxc6b530783e01a k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.157 ae5c1344-319f-40b5-b3fd-a4b1e193d9b1 default }" containerID=e1543840fe5a4e906413f5035c9c5159dadf97dca608ee2bda8a7454face483b datapathConfiguration="&{false false false false false }" interface=lxc727492efa87a k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n subsys=endpoint level=info msg="New endpoint" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a5d9d364d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=61961 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 line=611 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a5d9d364d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1650 identity=61961 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=54026 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=84 identity=54026 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=6877 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=342 identity=6877 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a5d9d364d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1650 identity=61961 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh subsys=endpoint level=info msg="Successful endpoint creation" containerID=a5d9d364d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1650 identity=61961 ipv4=10.0.0.20 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-mzglh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1543840fe datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=342 identity=6877 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1543840fe datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=342 identity=6877 ipv4=10.0.0.157 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-c769c4ff7-kjcg6 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=d79b0a2505 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=84 identity=54026 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n subsys=endpoint level=info msg="Successful endpoint creation" containerID=d79b0a2505 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=84 identity=54026 ipv4=10.0.0.174 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xh99n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.178 760a28d8-2538-45f4-8d73-7b6662a24b31 default }" containerID=e29189c82ec0f84e352d4990345e46f4821a96b86ace372e633eb17f58e0fcc4 datapathConfiguration="&{false false false false false }" interface=lxc0b7ca3148ae4 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e29189c82e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e29189c82e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e29189c82e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=48907 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e29189c82e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=436 identity=48907 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e29189c82e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=436 identity=48907 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=endpoint level=info msg="Successful endpoint creation" containerID=e29189c82e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=48907 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 d549f688-1a2c-459c-9a8e-844a80b83976 default }" containerID=49ee58d6dd64258492bf335a669b09e87720d852b1637ab08adcd4a056efe817 datapathConfiguration="&{false false false false false }" interface=lxc1d65eaf4e8f7 k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49ee58d6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49ee58d6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49ee58d6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49ee58d6dd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1207 identity=41591 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49ee58d6dd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1207 identity=41591 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49ee58d6dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=41591 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.151 0caf5122-ba48-4757-9eb9-32818bdcac1e default }" containerID=beb747819d1dba80a36fb2dce2d6d4cf95950d86ab0a072244995714816bd685 datapathConfiguration="&{false false false false false }" interface=lxc60cbc709ded2 k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=beb747819d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=beb747819d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=beb747819d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=beb747819d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1367 identity=41591 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=beb747819d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1367 identity=41591 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=beb747819d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1367 identity=41591 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=daemon level=info msg="Delete endpoint request" containerID=e29189c82e endpointID=436 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-gmczr subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d0263bbd-c2e2-4d07-8f18-db27e67796f1 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=e29189c82e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=436 identity=48907 ipv4=10.0.0.178 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-gmczr subsys=endpoint level=info msg="Delete endpoint request" containerID=49ee58d6dd endpointID=1207 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=49ee58d6dd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1207 identity=41591 ipv4=10.0.0.223 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e9b7aa46-bdb8-40fb-96e5-3205b66c73c3 subsys=endpoint level=info msg="Delete endpoint request" containerID=beb747819d endpointID=1367 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=beb747819d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1367 identity=41591 ipv4=10.0.0.151 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a090187e-c5ba-495d-9933-b00b9fe5a7c8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 f9a5f50b-b3d7-4b4b-a0b2-5be024d95e93 default }" containerID=1e5bea1294259396fd190d0b18b0770c30a8e285201d5007b7bbcce8096ea0fd datapathConfiguration="&{false false false false false }" interface=lxcd04c74ba8491 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1e5bea1294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1e5bea1294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1e5bea1294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=1114 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1e5bea1294 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=882 identity=1114 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=1e5bea1294 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=882 identity=1114 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1e5bea1294 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=882 identity=1114 ipv4=10.0.0.147 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 9a9976ad-a32c-44d9-8cf1-a463be9038fb default }" containerID=2d0768517f32f47f2a6d4b11662790d4adc47470b4f94557a9195321198d1ab4 datapathConfiguration="&{false false false false false }" interface=lxcdc6c069950f3 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2d0768517f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2d0768517f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2d0768517f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=4010 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2d0768517f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1074 identity=4010 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2d0768517f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1074 identity=4010 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2d0768517f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1074 identity=4010 ipv4=10.0.0.159 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.34 6c432040-97fc-4cf3-b74c-f662be6d4126 default }" containerID=2916377b06538bf53e817ce69ed03476193b21ffbba8a54b38baae2610c2983f datapathConfiguration="&{false false false false false }" interface=lxcdf637bc0ef71 k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2916377b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2916377b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2916377b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=18435 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2916377b06 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2850 identity=18435 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.68 4c6a08cd-3dab-4106-b492-b2c55c690a31 default }" containerID=98c6bb40d11e123dd75aebbdb59a761cdf39115c70e484bb0e7e70d476335e0d datapathConfiguration="&{false false false false false }" interface=lxc88827dab14ab k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=98c6bb40d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=98c6bb40d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.7 a0d0e4da-a446-463f-bf3c-ba73750e2c48 default }" containerID=146b7e35ac213989469ce33210693e00b9906c5427550aff2473b8c689504b55 datapathConfiguration="&{false false false false false }" interface=lxcb98658349bff k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=146b7e35ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=146b7e35ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=98c6bb40d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=13555 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=98c6bb40d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1559 identity=13555 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=146b7e35ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=43737 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=146b7e35ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=201 identity=43737 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2916377b06 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2850 identity=18435 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp subsys=endpoint level=info msg="Successful endpoint creation" containerID=2916377b06 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2850 identity=18435 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-57dlp subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.113 7803cd24-0908-46d5-84d1-6b47e4d6befd default }" containerID=6b4a2cb512948d8e79ed076a00a9e3c3fb0f19dbe2a71f30aeaa6808424f7c0d datapathConfiguration="&{false false false false false }" interface=lxc65a5a99eb090 k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6b4a2cb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6b4a2cb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6b4a2cb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6b4a2cb512 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=880 identity=41591 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=98c6bb40d1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1559 identity=13555 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=98c6bb40d1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1559 identity=13555 ipv4=10.0.0.68 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=146b7e35ac datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=201 identity=43737 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=146b7e35ac datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=201 identity=43737 ipv4=10.0.0.7 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6b4a2cb512 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=880 identity=41591 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=endpoint level=info msg="Successful endpoint creation" containerID=6b4a2cb512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=41591 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 2a15c9ca-2f5f-4365-9274-2845844245f4 default }" containerID=d09a0d9d0490965693607ce71312cf04ceb59c3db6242f528c656b0c78c48b7b datapathConfiguration="&{false false false false false }" interface=lxca6bf3f89d6c6 k8sPodName=monitoring/vector-2v7kt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d09a0d9d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d09a0d9d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d09a0d9d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=8858 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d09a0d9d04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3120 identity=8858 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d09a0d9d04 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3120 identity=8858 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt subsys=endpoint level=info msg="Successful endpoint creation" containerID=d09a0d9d04 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3120 identity=8858 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/vector-2v7kt subsys=daemon level=info msg="Delete endpoint request" containerID=6b4a2cb512 endpointID=880 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=6b4a2cb512 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=880 identity=41591 ipv4=10.0.0.113 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a6b66d42-736e-4de2-9284-49a43b45957d subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.165 7768d11e-5c9b-407a-9057-af500210a798 default }" containerID=ac241baeb450fa93ce38d446a794cfbdd639d197cf40999373570fc607f99cb8 datapathConfiguration="&{false false false false false }" interface=lxc51601e23b470 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ac241baeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ac241baeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ac241baeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=10322 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ac241baeb4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2351 identity=10322 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=ac241baeb4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2351 identity=10322 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ac241baeb4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2351 identity=10322 ipv4=10.0.0.165 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.152 c03ea528-e6c4-4da9-998a-365b55847499 default }" containerID=a7442d95227ef62236f6aaf96ee2f342bb1ca40191bdefe90a226f71d58da4b7 datapathConfiguration="&{false false false false false }" interface=lxcdd2c7c442511 k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7442d9522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7442d9522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7442d9522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=43325 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7442d9522 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=286 identity=43325 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a7442d9522 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=286 identity=43325 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7442d9522 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=286 identity=43325 ipv4=10.0.0.152 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-2xhz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.183 bd7cbb62-5f5e-4b33-8961-0c18dc5ddc9d default }" containerID=c8de86edbdc90f17eecd670909d166cf6c4c5fa6f2d91bb8e84bcbd0d6fcbe81 datapathConfiguration="&{false false false false false }" interface=lxc7aa20c97e0cf k8sPodName=openstack/memcached-memcached-6479589586-6dw8f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c8de86edbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c8de86edbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c8de86edbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=3544 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c8de86edbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2027 identity=3544 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c8de86edbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2027 identity=3544 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f subsys=endpoint level=info msg="Successful endpoint creation" containerID=c8de86edbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2027 identity=3544 ipv4=10.0.0.183 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-6dw8f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 9ba016ea-906c-42a8-b7c9-6d3bfa606aa5 default }" containerID=5c9223cf0994aa446dc55999c236203f27c5fc00a9b1209f8c2d5784984b91dc datapathConfiguration="&{false false false false false }" interface=lxc053f1c9453ee k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5c9223cf09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5c9223cf09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5c9223cf09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5c9223cf09 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=450 identity=41591 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5c9223cf09 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=450 identity=41591 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=endpoint level=info msg="Successful endpoint creation" containerID=5c9223cf09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=41591 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=daemon level=info msg="Delete endpoint request" containerID=5c9223cf09 endpointID=450 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=5c9223cf09 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=450 identity=41591 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-0e4041b6-9a72-4c11-9e26-36e49f2d238e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.5 68cb126b-c6d8-4bfe-a343-cf7f3fd50415 default }" containerID=8f5d668ad49e4e0070ed570e934f1a8652747f1dbb3d69e6ca26680a98d4a774 datapathConfiguration="&{false false false false false }" interface=lxc5f731e19fa0f k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f5d668ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f5d668ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f5d668ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=63593 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f5d668ad4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=913 identity=63593 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8f5d668ad4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=913 identity=63593 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f5d668ad4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=913 identity=63593 ipv4=10.0.0.5 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.216 67fef1ef-a309-49ed-ae42-08d0b3125559 default }" containerID=b2d5966966cf6b8a33078201c5b3f152f708b92f8b78f68cc7ec02909b3fcd69 datapathConfiguration="&{false false false false false }" interface=lxc2eb05e920a5a k8sPodName=openstack/keystone-api-787fb44776-7rltt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b2d5966966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b2d5966966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b2d5966966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=22288 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b2d5966966 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1535 identity=22288 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b2d5966966 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1535 identity=22288 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt subsys=endpoint level=info msg="Successful endpoint creation" containerID=b2d5966966 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1535 identity=22288 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/keystone-api-787fb44776-7rltt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.141 2807385d-0400-4bd4-bef2-47132e269a7f default }" containerID=ded3c929b14f00b152640c0f4cd967933be9e0251785ecfec2e1932a6b8713e0 datapathConfiguration="&{false false false false false }" interface=lxc05a041597cb9 k8sPodName=openstack/keystone-credential-setup-7jp9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ded3c929b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ded3c929b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ded3c929b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=23891 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ded3c929b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=23891 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ded3c929b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=923 identity=23891 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=ded3c929b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=23891 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ded3c929b1 endpointID=923 k8sNamespace=openstack k8sPodName=keystone-credential-setup-7jp9t subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=015c2244-ac2e-4157-a1b3-a02ff5214f1a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=ded3c929b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=923 identity=23891 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/keystone-credential-setup-7jp9t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 1cfd45d1-af69-4045-9435-22538c90a067 default }" containerID=0a94ea7a5c5c86bee0997292187b3e2c31e5e841e18200bb1f3b2bb7aaac2561 datapathConfiguration="&{false false false false false }" interface=lxc465956e35e93 k8sPodName=openstack/keystone-db-init-g45h8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f3e088a-c15b-490a-9614-6242c0527019,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7f3e088a-c15b-490a-9614-6242c0527019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7f3e088a-c15b-490a-9614-6242c0527019;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=7f3e088a-c15b-490a-9614-6242c0527019;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=8274 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7f3e088a-c15b-490a-9614-6242c0527019,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=7f3e088a-c15b-490a-9614-6242c0527019,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=947 identity=8274 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a94ea7a5c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=947 identity=8274 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a94ea7a5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=8274 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0a94ea7a5c endpointID=947 k8sNamespace=openstack k8sPodName=keystone-db-init-g45h8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7f3e088a-c15b-490a-9614-6242c0527019 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=7f3e088a-c15b-490a-9614-6242c0527019 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0a94ea7a5c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=947 identity=8274 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/keystone-db-init-g45h8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 1e41ab71-2240-42fd-acbe-37b2a05c9fe2 default }" containerID=44c1012972bba8117d7057b4e22522dadddb240e3a9c4683d477e7967883f6f3 datapathConfiguration="&{false false false false false }" interface=lxc1536f716cd8b k8sPodName=openstack/keystone-fernet-setup-zvpmh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=25885 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1092 identity=25885 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=44c1012972 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1092 identity=25885 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=endpoint level=info msg="Successful endpoint creation" containerID=44c1012972 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=25885 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44c1012972 endpointID=1092 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-zvpmh subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=cec20427-dbcd-4837-a72a-aaf3d15099c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=44c1012972 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1092 identity=25885 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/keystone-fernet-setup-zvpmh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 ee2f3205-e867-4b4b-8a15-dd434298747d default }" containerID=33faa8ffb1c1c750d67547f6ee1b10cb1637c94603ed7dfe00368a97bc00ba27 datapathConfiguration="&{false false false false false }" interface=lxc7e46b7e38c0c k8sPodName=openstack/keystone-db-sync-dwbtd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=33faa8ffb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=33faa8ffb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=33faa8ffb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=4881 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=33faa8ffb1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=870 identity=4881 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=33faa8ffb1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=870 identity=4881 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=endpoint level=info msg="Successful endpoint creation" containerID=33faa8ffb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=4881 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=daemon level=info msg="Delete endpoint request" containerID=33faa8ffb1 endpointID=870 k8sNamespace=openstack k8sPodName=keystone-db-sync-dwbtd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=80dd62f5-9a10-40c9-97ce-e0192316e677 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=33faa8ffb1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=870 identity=4881 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/keystone-db-sync-dwbtd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.215 2f40df6d-757d-4fe5-9433-44f6d6c0b997 default }" containerID=0afa06dd141a051ccd9c61605533b4aab26c8a9c007e97de018876fedbf96acb datapathConfiguration="&{false false false false false }" interface=lxc1e2899899864 k8sPodName=openstack/keystone-rabbit-init-mnptd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=9960 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=273 identity=9960 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0afa06dd14 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=273 identity=9960 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=endpoint level=info msg="Successful endpoint creation" containerID=0afa06dd14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=273 identity=9960 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0afa06dd14 endpointID=273 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-mnptd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=27df90fd-8a0f-4e9a-859d-80f4b6f7bfd4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0afa06dd14 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=273 identity=9960 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/keystone-rabbit-init-mnptd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 1eba2e6c-71f2-45b3-8794-dba3ed2f22a5 default }" containerID=1babd101a4ec0f351a74fff6086bbbeb369d7b09de8a536f50c66f37eb7db562 datapathConfiguration="&{false false false false false }" interface=lxc535e2622d9a6 k8sPodName=openstack/keystone-domain-manage-r8qqd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identity=17373 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2120 identity=17373 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1babd101a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2120 identity=17373 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=endpoint level=info msg="Successful endpoint creation" containerID=1babd101a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2120 identity=17373 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1babd101a4 endpointID=2120 k8sNamespace=openstack k8sPodName=keystone-domain-manage-r8qqd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=de98b24a-f02e-4ed4-bc26-c6ba4313a35b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=1babd101a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2120 identity=17373 ipv4=10.0.0.130 ipv6= k8sPodName=openstack/keystone-domain-manage-r8qqd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 cfe19ba3-ebc1-4c8c-ac26-3dc3887db1fe default }" containerID=a9f957f7958c608fe5cace8ed891cdaf685a9915723d59af1a4772266fbb7eaf datapathConfiguration="&{false false false false false }" interface=lxc239ec2b403fc k8sPodName=openstack/keystone-bootstrap-4cs79 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a9f957f795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a9f957f795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a9f957f795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=611 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=a9f957f795 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=712 identity=611 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a9f957f795 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=712 identity=611 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a9f957f795 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=611 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a9f957f795 endpointID=712 k8sNamespace=openstack k8sPodName=keystone-bootstrap-4cs79 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=b2e9ebeb-e036-4c92-90f7-a64ddd80d900 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a9f957f795 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=712 identity=611 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/keystone-bootstrap-4cs79 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 1bb68d70-9917-43a4-b735-8e6990446d20 default }" containerID=38edce28a40f6c40b91d2d126cd77f105ae3652a70f15008cf8aa5ad3d936e22 datapathConfiguration="&{false false false false false }" interface=lxcf8d18089b376 k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38edce28a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38edce28a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38edce28a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38edce28a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=294 identity=41591 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38edce28a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=294 identity=41591 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38edce28a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=41591 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=daemon level=info msg="Delete endpoint request" containerID=38edce28a4 endpointID=294 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=38edce28a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=294 identity=41591 ipv4=10.0.0.46 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e3a13679-e243-44b9-bd47-6a2dee4bb003 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 65472496-ab08-4f9d-a07d-1f5e4bc94f17 default }" containerID=f0bc2324edeff05fd77efb4233b61c5cfb31a55c24aaa3a8da4902652f671a74 datapathConfiguration="&{false false false false false }" interface=lxc6c9b097c5155 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0bc2324ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0bc2324ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0bc2324ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=27789 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0bc2324ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1855 identity=27789 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0bc2324ed datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1855 identity=27789 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0bc2324ed datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1855 identity=27789 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.133 02e4038b-766a-4439-855e-a6d1f2d0039b default }" containerID=9afb5ce281fc226f9991385dd668296b415e25bc7caa46d9e26ce03a4df6925f datapathConfiguration="&{false false false false false }" interface=lxce2568bfea380 k8sPodName=openstack/barbican-api-7b978495b4-9rsvh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9afb5ce281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9afb5ce281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9afb5ce281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=49215 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=9afb5ce281 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=197 identity=49215 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 211a2006-1a74-4a0a-a6af-9d9bed6b734e default }" containerID=14dfa1fbcd61f33afc30e2cb0731165450f4efc3955e2e6e544953de15da710a datapathConfiguration="&{false false false false false }" interface=lxcaf3ef33395e8 k8sPodName=openstack/barbican-db-init-dg4w8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14dfa1fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14dfa1fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=67682582-1423-4d9a-b684-f9150755aa4b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=67682582-1423-4d9a-b684-f9150755aa4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=67682582-1423-4d9a-b684-f9150755aa4b;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=67682582-1423-4d9a-b684-f9150755aa4b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=14dfa1fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=15856 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=67682582-1423-4d9a-b684-f9150755aa4b,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=67682582-1423-4d9a-b684-f9150755aa4b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14dfa1fbcd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=822 identity=15856 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9afb5ce281 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=197 identity=49215 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh subsys=endpoint level=info msg="Successful endpoint creation" containerID=9afb5ce281 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=197 identity=49215 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/barbican-api-7b978495b4-9rsvh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=14dfa1fbcd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=822 identity=15856 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14dfa1fbcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=822 identity=15856 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=14dfa1fbcd endpointID=822 k8sNamespace=openstack k8sPodName=barbican-db-init-dg4w8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=67682582-1423-4d9a-b684-f9150755aa4b k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=67682582-1423-4d9a-b684-f9150755aa4b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=14dfa1fbcd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=822 identity=15856 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/barbican-db-init-dg4w8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.245 aec228a2-12d2-4255-8c32-1920fb78fe97 default }" containerID=03deeabbdb5946ceb18ba802b1f2bb0197c3d8bc1f132eff214b3b62c36ebfa7 datapathConfiguration="&{false false false false false }" interface=lxc7ec304cf78bf k8sPodName=openstack/barbican-db-sync-t7wwq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03deeabbdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03deeabbdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03deeabbdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=11992 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=03deeabbdb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=902 identity=11992 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=03deeabbdb datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=902 identity=11992 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=endpoint level=info msg="Successful endpoint creation" containerID=03deeabbdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=11992 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03606936572564828 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=03deeabbdb endpointID=902 k8sNamespace=openstack k8sPodName=barbican-db-sync-t7wwq subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=a48fd963-7caa-47b1-b414-09fee5f8420a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=03deeabbdb datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=902 identity=11992 ipv4=10.0.0.245 ipv6= k8sPodName=openstack/barbican-db-sync-t7wwq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.95 910dc56a-f900-48a5-8b98-5c41ca07bcdd default }" containerID=76c7c47b95d5d268ccf646d1bbfe431b346c034e11bd36ff695581bbd6db43aa datapathConfiguration="&{false false false false false }" interface=lxc0a5fb0bc1ca9 k8sPodName=openstack/barbican-rabbit-init-8zd8s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=76c7c47b95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=76c7c47b95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5d96870f-f849-420e-9232-69728a8665bb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5d96870f-f849-420e-9232-69728a8665bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5d96870f-f849-420e-9232-69728a8665bb;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=5d96870f-f849-420e-9232-69728a8665bb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=76c7c47b95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=18493 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5d96870f-f849-420e-9232-69728a8665bb,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=5d96870f-f849-420e-9232-69728a8665bb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=76c7c47b95 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=277 identity=18493 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=76c7c47b95 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=277 identity=18493 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=endpoint level=info msg="Successful endpoint creation" containerID=76c7c47b95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=18493 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=76c7c47b95 endpointID=277 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-8zd8s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5d96870f-f849-420e-9232-69728a8665bb k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=5d96870f-f849-420e-9232-69728a8665bb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=76c7c47b95 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=277 identity=18493 ipv4=10.0.0.95 ipv6= k8sPodName=openstack/barbican-rabbit-init-8zd8s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.94 c500eca3-2918-423d-bf5c-58dee56a1cc4 default }" containerID=979f00182aa6cd634bd00b0598c38fa9b9dc6d04da41ede88007940b21c5f618 datapathConfiguration="&{false false false false false }" interface=lxc1a1226f172d7 k8sPodName=openstack/barbican-ks-service-nmbmc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979f00182a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979f00182a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=979f00182a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identity=36176 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979f00182a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3529 identity=36176 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=979f00182a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3529 identity=36176 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=endpoint level=info msg="Successful endpoint creation" containerID=979f00182a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3529 identity=36176 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=daemon level=info msg="Delete endpoint request" containerID=979f00182a endpointID=3529 k8sNamespace=openstack k8sPodName=barbican-ks-service-nmbmc subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=ff44b18b-63fb-4f5a-9ac6-585abcfb513d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=979f00182a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3529 identity=36176 ipv4=10.0.0.94 ipv6= k8sPodName=openstack/barbican-ks-service-nmbmc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 65d4518a-c3ba-4fea-b4ea-4357ddae4fd1 default }" containerID=a110c61cfaa5af0721bbafe36b1d7c1ba2d77105ea8e06f1af3ed48b4272262c datapathConfiguration="&{false false false false false }" interface=lxc9830008b1f36 k8sPodName=openstack/barbican-ks-endpoints-k5k87 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a110c61cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a110c61cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a110c61cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=19527 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a110c61cfa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1982 identity=19527 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a110c61cfa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1982 identity=19527 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a110c61cfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=19527 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a110c61cfa endpointID=1982 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-k5k87 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=4503a8b3-9c32-4f48-a0fd-38aaf1b48940 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=a110c61cfa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1982 identity=19527 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/barbican-ks-endpoints-k5k87 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.13 c3dc7f83-4220-4a47-8f81-3b528f95b0ba default }" containerID=152010c2fc8031f107d51f9464fc0ceab975c8e58f16a45f35a875e2d4f1ef6b datapathConfiguration="&{false false false false false }" interface=lxc98e73e78ed9a k8sPodName=openstack/barbican-ks-user-lzhsl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=152010c2fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=152010c2fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=152010c2fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=1416 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=152010c2fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2241 identity=1416 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=152010c2fc datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2241 identity=1416 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=endpoint level=info msg="Successful endpoint creation" containerID=152010c2fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2241 identity=1416 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=152010c2fc endpointID=2241 k8sNamespace=openstack k8sPodName=barbican-ks-user-lzhsl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=5b0b9464-02c6-4b16-92d8-a7edebe6d571 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=152010c2fc datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2241 identity=1416 ipv4=10.0.0.13 ipv6= k8sPodName=openstack/barbican-ks-user-lzhsl subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.6 5a91c3e5-d6e4-4fda-9b10-82387af67c0e default }" containerID=f5a8d96ed468dbf8ce5a3c66c0ed351a8eb5bf76b0d71ddc485a12dc4602c711 datapathConfiguration="&{false false false false false }" interface=lxc759d0c8333b0 k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f5a8d96ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f5a8d96ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f5a8d96ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=2779 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=f5a8d96ed4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=332 identity=2779 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f5a8d96ed4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=332 identity=2779 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch subsys=endpoint level=info msg="Successful endpoint creation" containerID=f5a8d96ed4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=332 identity=2779 ipv4=10.0.0.6 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-pwsch subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.173 7b494f92-e9c4-451c-a0e4-7b4efff7a50a default }" containerID=b56eca225b9ebfcbe5441be5fa19b06ccd390d7f57d13b46549b3c76de8a7062 datapathConfiguration="&{false false false false false }" interface=lxc09ebc6827ff7 k8sPodName=openstack/rook-ceph-detect-version-xd6cp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b56eca225b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b56eca225b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b56eca225b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=24003 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b56eca225b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=34 identity=24003 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b56eca225b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=34 identity=24003 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=endpoint level=info msg="Successful endpoint creation" containerID=b56eca225b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=24003 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b56eca225b endpointID=34 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-xd6cp subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1 k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=83e1d4bd-4c8e-4416-8dc9-303d6d0181b1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=b56eca225b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=34 identity=24003 ipv4=10.0.0.173 ipv6= k8sPodName=openstack/rook-ceph-detect-version-xd6cp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 be29f3cc-c222-4187-a78a-11ef1b32035b default }" containerID=d1d61e882652b0f36b0238f74c5a7d359d75c91e34c381f52f3b8cc1df889e5b datapathConfiguration="&{false false false false false }" interface=lxca02dfbef0ae1 k8sPodName=openstack/ceph-object-controller-detect-version-shds4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d1d61e8826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d1d61e8826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1354edb5-4d19-4a32-8591-0f166910c316,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1354edb5-4d19-4a32-8591-0f166910c316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=1354edb5-4d19-4a32-8591-0f166910c316;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=1354edb5-4d19-4a32-8591-0f166910c316;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d1d61e8826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 identity=59401 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=1354edb5-4d19-4a32-8591-0f166910c316,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=1354edb5-4d19-4a32-8591-0f166910c316,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d1d61e8826 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1382 identity=59401 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d1d61e8826 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1382 identity=59401 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d1d61e8826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1382 identity=59401 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d1d61e8826 endpointID=1382 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-shds4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=1354edb5-4d19-4a32-8591-0f166910c316 k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=1354edb5-4d19-4a32-8591-0f166910c316 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=d1d61e8826 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1382 identity=59401 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-shds4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 d29a0803-d16f-4f14-8918-118c61cce98f default }" containerID=59f8591d77a583bd872a7173b5cca0bc97f8b84164977ac1d9f9a159f975d277 datapathConfiguration="&{false false false false false }" interface=lxc7b5adf8ed5d3 k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=59f8591d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=59f8591d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=59f8591d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=41591 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=59f8591d77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2004 identity=41591 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=59f8591d77 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2004 identity=41591 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=endpoint level=info msg="Successful endpoint creation" containerID=59f8591d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2004 identity=41591 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=daemon level=info msg="Delete endpoint request" containerID=59f8591d77 endpointID=2004 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=59f8591d77 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2004 identity=41591 ipv4=10.0.0.32 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dd8f1fa5-8b0b-499d-a38a-37eb5fc4d89b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.78 b5bc4963-197e-4fb7-b5fb-1226ed165ac3 default }" containerID=b6b40f695d99b82f5626966fd6c9dd6cd5ecb30d4ef7ac5b42c665d0727fbc39 datapathConfiguration="&{false false false false false }" interface=lxcedad89c71fdb k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=22082 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3757 identity=22082 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6b40f695d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3757 identity=22082 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6b40f695d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3757 identity=22082 ipv4=10.0.0.78 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.204 24ad70f9-bcdb-47eb-8264-ed437da8a443 default }" containerID=32a50c48021af47d6737c856b15a8ec453235c4f225cf47cb99b947192852a97 datapathConfiguration="&{false false false false false }" interface=lxc86c546e6da8f k8sPodName=openstack/glance-db-init-bl4jv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32a50c4802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=32a50c4802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32a50c4802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=384 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=32a50c4802 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=155 identity=384 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=32a50c4802 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=155 identity=384 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=endpoint level=info msg="Successful endpoint creation" containerID=32a50c4802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=384 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.75 ada60f30-6b0e-4c24-8b31-32c6c84118ed default }" containerID=debabec2b1c9799756de487bb6e2d7f81df559712f14e94efbc0c9e94a8e9738 datapathConfiguration="&{false false false false false }" interface=lxcd9501ae16063 k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=debabec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=debabec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=debabec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=60126 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=debabec2b1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3728 identity=60126 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.221 eb12b2f2-c0b6-4900-9623-ea9b7ade6bda default }" containerID=2563e4a14b5ce124a1cb0828435c941aa91d45196450a25fdbcfa844769b7c0f datapathConfiguration="&{false false false false false }" interface=lxc9bfef1b010a9 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2563e4a14b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2563e4a14b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2563e4a14b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=3872 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2563e4a14b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1850 identity=3872 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn subsys=endpoint level=info msg="Delete endpoint request" containerID=32a50c4802 endpointID=155 k8sNamespace=openstack k8sPodName=glance-db-init-bl4jv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86 k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=a821a75d-6f73-4c8a-b278-378450c99d86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Rewrote endpoint BPF program" containerID=debabec2b1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3728 identity=60126 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=debabec2b1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3728 identity=60126 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-4nmpd subsys=daemon level=info msg="Removed endpoint" containerID=32a50c4802 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=155 identity=384 ipv4=10.0.0.204 ipv6= k8sPodName=openstack/glance-db-init-bl4jv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2563e4a14b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1850 identity=3872 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn subsys=endpoint level=info msg="Successful endpoint creation" containerID=2563e4a14b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1850 identity=3872 ipv4=10.0.0.221 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-4gdnn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.122 40032baf-36f7-44e7-9d21-6d076c926178 default }" containerID=8e1ea82cef18af0391fb2b2ef6021b273f2c32945b07cb78af26339ffdf3c98d datapathConfiguration="&{false false false false false }" interface=lxc92687e6a1660 k8sPodName=openstack/glance-db-sync-wncf7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e1ea82cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e1ea82cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e1ea82cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=15248 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8e1ea82cef datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1564 identity=15248 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e1ea82cef datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1564 identity=15248 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e1ea82cef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=15248 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8e1ea82cef endpointID=1564 k8sNamespace=openstack k8sPodName=glance-db-sync-wncf7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=d44f26a1-1932-4c3f-b78a-b45dc1f0b838 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8e1ea82cef datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1564 identity=15248 ipv4=10.0.0.122 ipv6= k8sPodName=openstack/glance-db-sync-wncf7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.244 c5ef31c0-31eb-4975-bbdd-ac636a1db446 default }" containerID=ea1ad83253caa966e44547ff4b2e9ab31652421f432c5580be42821c156dd507 datapathConfiguration="&{false false false false false }" interface=lxc3c9837e564e0 k8sPodName=openstack/glance-rabbit-init-58hwd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ea1ad83253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ea1ad83253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ea1ad83253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=15239 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ea1ad83253 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=937 identity=15239 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ea1ad83253 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=937 identity=15239 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=endpoint level=info msg="Successful endpoint creation" containerID=ea1ad83253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=15239 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ea1ad83253 endpointID=937 k8sNamespace=openstack k8sPodName=glance-rabbit-init-58hwd subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37 k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b9cbea79-77b5-491a-8db9-08c8f1275e37 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=ea1ad83253 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=937 identity=15239 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/glance-rabbit-init-58hwd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.112 5bcd1b9e-7b60-4b75-9673-b59f872b570f default }" containerID=2b4d80dbaad070a05c5b9d15af0df88b47e7d2b639c3499e802f2554d6b14d0b datapathConfiguration="&{false false false false false }" interface=lxc21e9e13e249e k8sPodName=openstack/glance-ks-service-tt55q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b4d80dbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b4d80dbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b4d80dbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=58522 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b4d80dbaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1150 identity=58522 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2b4d80dbaa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1150 identity=58522 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b4d80dbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=58522 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2b4d80dbaa endpointID=1150 k8sNamespace=openstack k8sPodName=glance-ks-service-tt55q subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=284aeab5-ea5a-44a5-9543-96b6bdd42514 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2b4d80dbaa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1150 identity=58522 ipv4=10.0.0.112 ipv6= k8sPodName=openstack/glance-ks-service-tt55q subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 6939a4ba-74cf-415c-a7da-277c5a01fc91 default }" containerID=cc0d317f297567e686c5d8ce2cc327484f98f13e7ac45146ada6b37cfcf2cf6a datapathConfiguration="&{false false false false false }" interface=lxcfefe038c8f5f k8sPodName=openstack/glance-ks-endpoints-7r5q9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cc0d317f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cc0d317f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cc0d317f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=49034 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cc0d317f29 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=49034 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cc0d317f29 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=246 identity=49034 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=cc0d317f29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=246 identity=49034 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=daemon level=info msg="Delete endpoint request" containerID=cc0d317f29 endpointID=246 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-7r5q9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=32d46b69-2b66-4033-a8b3-4d563f754f3a k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=cc0d317f29 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=246 identity=49034 ipv4=10.0.0.105 ipv6= k8sPodName=openstack/glance-ks-endpoints-7r5q9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.53 3d637bed-01e2-4a58-b5bb-0766edb871db default }" containerID=2399875fbda1947e88609b71dfe0d5508bf15d7dfe52fb1881f1b91649d91b24 datapathConfiguration="&{false false false false false }" interface=lxcff1aaf44d15d k8sPodName=openstack/glance-ks-user-zr7ft labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2399875fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2399875fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f306b368-b027-496d-afb4-289181b1b58f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f306b368-b027-496d-afb4-289181b1b58f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=f306b368-b027-496d-afb4-289181b1b58f;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=f306b368-b027-496d-afb4-289181b1b58f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2399875fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=52872 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=f306b368-b027-496d-afb4-289181b1b58f,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=f306b368-b027-496d-afb4-289181b1b58f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2399875fbd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1516 identity=52872 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2399875fbd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1516 identity=52872 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=endpoint level=info msg="Successful endpoint creation" containerID=2399875fbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=52872 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=2399875fbd endpointID=1516 k8sNamespace=openstack k8sPodName=glance-ks-user-zr7ft subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=f306b368-b027-496d-afb4-289181b1b58f k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=f306b368-b027-496d-afb4-289181b1b58f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=2399875fbd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1516 identity=52872 ipv4=10.0.0.53 ipv6= k8sPodName=openstack/glance-ks-user-zr7ft subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 3a1a7a3a-59ab-4625-a4c6-10b7d585ff30 default }" containerID=f68b8c667a2aa1702dae73424ad4687e3a69978ccc2b9606ef9ced494698bbae datapathConfiguration="&{false false false false false }" interface=lxcd5acfb004b9b k8sPodName=openstack/glance-metadefs-load-7l2jl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f68b8c667a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f68b8c667a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f68b8c667a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=65081 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f68b8c667a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=881 identity=65081 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f68b8c667a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=881 identity=65081 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=endpoint level=info msg="Successful endpoint creation" containerID=f68b8c667a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=881 identity=65081 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=f68b8c667a endpointID=881 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7l2jl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=957a7e4d-2561-476c-a36a-22151a77bfdc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=f68b8c667a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=881 identity=65081 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/glance-metadefs-load-7l2jl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.125 cbb21964-f0e3-4dbb-84c7-9ebb028689d9 default }" containerID=3620eee36cfa96a9ebfe72d7ec0d2b24d43a924cab1ca176364f6192cc0d9d33 datapathConfiguration="&{false false false false false }" interface=lxc5e9e18bb401f k8sPodName=openstack/glance-storage-init-mj6mq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3620eee36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3620eee36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3620eee36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identity=5994 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3620eee36c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3627 identity=5994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3620eee36c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3627 identity=5994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=endpoint level=info msg="Successful endpoint creation" containerID=3620eee36c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3627 identity=5994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3620eee36c endpointID=3627 k8sNamespace=openstack k8sPodName=glance-storage-init-mj6mq subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=6a8f0af0-aa02-4d71-83f8-fadbc46bdddb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3620eee36c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3627 identity=5994 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/glance-storage-init-mj6mq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 0ee9072d-4ae6-4218-95a1-65da7883c889 default }" containerID=02452997795ca9799cc1a65a4448a8c31067bad14e7232fddf128511d6b16435 datapathConfiguration="&{false false false false false }" interface=lxc49179e39f8d1 k8sPodName=openstack/glance-api-7b69894c47-skccg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0245299779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0245299779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0245299779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=52276 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0245299779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=52276 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0245299779 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=157 identity=52276 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0245299779 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=157 identity=52276 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/glance-api-7b69894c47-skccg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.28 fe090950-2d79-4899-8abf-bc219e14985e default }" containerID=2bfe7366d2f8252011b2bc580239027dac7ab24b785e666544db5c96e686b011 datapathConfiguration="&{false false false false false }" interface=lxc1fd03ef32648 k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2bfe7366d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2bfe7366d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.35 f207c60f-60cb-41ba-ad9d-a95329e1d67d default }" containerID=94a7961474a42fcc5f7f8d7a15f2ba65851e73a6a3872d31018a9402ffc2d8e3 datapathConfiguration="&{false false false false false }" interface=lxca486dbaf9649 k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2bfe7366d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=13604 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2bfe7366d2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=419 identity=13604 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=22981 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2884 identity=22981 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 fbdf806f-0b25-4920-8885-f9f592761f28 default }" containerID=7254e9a6aa9559993e7e227ee56f3aea9d50b66650848b81652720ab72b9015d datapathConfiguration="&{false false false false false }" interface=lxc06b3a1111d70 k8sPodName=openstack/staffeln-db-init-zdc4n labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7254e9a6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7254e9a6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7254e9a6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=41212 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7254e9a6aa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2011 identity=41212 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2bfe7366d2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=419 identity=13604 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2bfe7366d2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=419 identity=13604 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/staffeln-api-869b4dbdd9-2cph7 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=94a7961474 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2884 identity=22981 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr subsys=endpoint level=info msg="Successful endpoint creation" containerID=94a7961474 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2884 identity=22981 ipv4=10.0.0.35 ipv6= k8sPodName=openstack/staffeln-conductor-7887b97886-bxnkr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7254e9a6aa datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2011 identity=41212 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=endpoint level=info msg="Successful endpoint creation" containerID=7254e9a6aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2011 identity=41212 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7254e9a6aa endpointID=2011 k8sNamespace=openstack k8sPodName=staffeln-db-init-zdc4n subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=66d70fa9-0f5a-400b-be12-d93ada68140c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=7254e9a6aa datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2011 identity=41212 ipv4=10.0.0.22 ipv6= k8sPodName=openstack/staffeln-db-init-zdc4n subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.25 2b39095d-886b-4a44-8b50-609942154584 default }" containerID=60fa4e5cba10b2dcfb4f71dd2053b3beb956e2a6029b8df34beecbd1ebf174a5 datapathConfiguration="&{false false false false false }" interface=lxc4620bd449dbb k8sPodName=openstack/staffeln-db-sync-fwrjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60fa4e5cba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60fa4e5cba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=19742555-0924-433f-bee3-553afc126eaf,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=19742555-0924-433f-bee3-553afc126eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=19742555-0924-433f-bee3-553afc126eaf;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=19742555-0924-433f-bee3-553afc126eaf;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60fa4e5cba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=13728 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=19742555-0924-433f-bee3-553afc126eaf,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=19742555-0924-433f-bee3-553afc126eaf,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60fa4e5cba datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1398 identity=13728 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=60fa4e5cba datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1398 identity=13728 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=60fa4e5cba datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1398 identity=13728 ipv4=10.0.0.25 ipv6= k8sPodName=openstack/staffeln-db-sync-fwrjg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager