level=info msg="Memory available for map entries (0.003% of 16764968960B): 41912422B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="758.369µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="39.901µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="784.081µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="7.12µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=92.719479ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="26.631µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="30.78µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="69.442µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="78.872µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="91.312µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="419.871µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.31µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=10.426295ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.518897ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="32.751µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.34µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="213.256µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="87.102µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="58.902µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=39.946105ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="211.605µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="13.31µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="33.161µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.29.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.065051ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="11.83µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=201.032059ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="19.79µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=201.045271ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="3.88µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="3.49µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.551µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="4.541µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.37µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="23.752µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="18.84µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="34.401µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="328.329µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="30.681µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.79µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="222.116µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="362.03µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.240351ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.9µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="19.111µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.19.213.29 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=warning msg="Waiting for k8s node information" error="required IPv4 PodCIDR not available" subsys=k8s level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.19.213.29 ipAddr.ipv6="" k8sNodeIP=199.19.213.29 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.19.213.29" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.176" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.19.213.29" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.19.213.29} {CiliumInternalIP 10.0.0.176}] 10.0.0.0/24 [] [] 10.0.0.155 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:40497" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.338168531s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="13.69µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="12.96µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="57.402µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="4.301µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1987 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.426167191s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.210 137e885c-4a24-43b9-b6d8-519c42ebb81f default }" containerID=8ef1fb51ec336f29aa896363d34e4eeb8aff08198cf735a68e1d738038b69a9c datapathConfiguration="&{false false false false false }" interface=lxc2960bf4c377e k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=44803 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3086 identity=44803 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=endpoint level=info msg="Compiled new BPF template" BPFCompilationTime=293.360824ms file-path=/var/run/cilium/state/templates/152e6da623c7f23960f6c0d3b440ff20fe68c10ae8ee6a5abc5707dca616fa47/bpf_host.o subsys=datapath-loader level=info msg="Create endpoint request" addressing="&{10.0.0.75 62d77391-679a-413e-bef4-f3918148db62 default }" containerID=fb16da6526b4ff6132d95e12a4da09c4482eb27f20fa2effa86b078b610eab03 datapathConfiguration="&{false false false false false }" interface=lxc3e82a06f59fe k8sPodName=kube-system/coredns-7c96b6546b-ms2mj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb16da6526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb16da6526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb16da6526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=3675 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb16da6526 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=932 identity=3675 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1987 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.155 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="reserved:health" ipv4=10.0.0.155 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=4 identityLabels="reserved:health" ipv4=10.0.0.155 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.068426134s file-path=/var/run/cilium/state/templates/5acb397ffcfbbba23bf62c2306ae318a9d6519a2a7807868bf43a034b1c16a55/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=987 identity=4 ipv4=10.0.0.155 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb16da6526 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=932 identity=3675 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8ef1fb51ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3086 identity=44803 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb16da6526 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=932 identity=3675 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=daemon level=info msg="Successful endpoint creation" containerID=8ef1fb51ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3086 identity=44803 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=daemon level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8ef1fb51ec endpointID=3086 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-c5tgg subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=39a1b002-75d2-498f-b8b6-a84e9d32f41e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=8ef1fb51ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3086 identity=44803 ipv4=10.0.0.210 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c5tgg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.32 66682c39-c21d-4725-9f70-de87e2a8203f default }" containerID=5361a79f6b9da3d83fa92571dd65b56c697ad46309360902cc59cb8e28b593e7 datapathConfiguration="&{false false false false false }" interface=lxce2dfbf236a7e k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=14615 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=449 identity=14615 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5361a79f6b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=449 identity=14615 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5361a79f6b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=449 identity=14615 ipv4=10.0.0.32 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-csfw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1987 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01987 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01987 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01987 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01987:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1987 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.49 06c44cba-a314-4cf9-affc-ab5498103680 default }" containerID=e64cdee4ea676e0e8fe1c2b2de112b71d2c78661370922bf4d6eaa2d06ce01e8 datapathConfiguration="&{false false false false false }" interface=lxc92b017eb4d8b k8sPodName=kube-system/coredns-67659f764b-j9whm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e64cdee4ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e64cdee4ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e64cdee4ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=3675 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e64cdee4ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=914 identity=3675 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.141 3bbd33bb-6fc6-433d-ace6-002b124568de default }" containerID=57dfa9eaf7e7823a280cbb1b7bdac413e407b1955957089bbf4d5f900238037b datapathConfiguration="&{false false false false false }" interface=lxcf7d7ebed10fc k8sPodName=kube-system/coredns-67659f764b-tpv46 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=57dfa9eaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=57dfa9eaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=57dfa9eaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=3675 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=57dfa9eaf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=945 identity=3675 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e64cdee4ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=914 identity=3675 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e64cdee4ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=914 identity=3675 ipv4=10.0.0.49 ipv6= k8sPodName=kube-system/coredns-67659f764b-j9whm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=57dfa9eaf7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=945 identity=3675 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 subsys=endpoint level=info msg="Successful endpoint creation" containerID=57dfa9eaf7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=945 identity=3675 ipv4=10.0.0.141 ipv6= k8sPodName=kube-system/coredns-67659f764b-tpv46 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.154 d5852940-13ff-44d9-a81c-e3c4c663366a default }" containerID=4248684b3dacff0995b5ea348c20fd84a18abc0124ea9f362801a13fbeb5ace2 datapathConfiguration="&{false false false false false }" interface=lxcb812120c746f k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identity=35836 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1167 identity=35836 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4248684b3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1167 identity=35836 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t subsys=endpoint level=info msg="Successful endpoint creation" containerID=4248684b3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1167 identity=35836 ipv4=10.0.0.154 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-6xb9t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fb16da6526 endpointID=932 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-ms2mj subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=fb16da6526 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=932 identity=3675 ipv4=10.0.0.75 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-ms2mj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.36 155ec1d3-f8fe-43a2-9590-0ec1d4dcb5c7 default }" containerID=b9787108eb74ae28c6a9dbbb47d1652757bf62f340564d29226383827876f0b8 datapathConfiguration="&{false false false false false }" interface=lxcd4012bd31ce7 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=15378 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=182 identity=15378 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 daa66955-9c98-4e35-af6a-7a618b3f2bd2 default }" containerID=07f1faa5d110c01e3eeea47b31e0740f3ec8941081d81a4c5827a38f7419cfe3 datapathConfiguration="&{false false false false false }" interface=lxc331d317d2dc8 k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07f1faa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07f1faa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07f1faa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=1192 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=07f1faa5d1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3050 identity=1192 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b9787108eb datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=182 identity=15378 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=b9787108eb datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=182 identity=15378 ipv4=10.0.0.36 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-q6b5z subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.221 88e67d37-e1f3-400c-a2fb-10a2c0d6b693 default }" containerID=bd12ec4827e5c62785317714068b0f7f55b3d5d037b8c5afc46b89fc3303e3e8 datapathConfiguration="&{false false false false false }" interface=lxce51aada244d2 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bd12ec4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bd12ec4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bd12ec4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identity=39504 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bd12ec4827 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4001 identity=39504 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=07f1faa5d1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3050 identity=1192 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07f1faa5d1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3050 identity=1192 ipv4=10.0.0.60 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-ghx24 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.242 be4c08c0-3b83-4777-9b2e-517a5db36e97 default }" containerID=e4fb26736bcf7ecdaf841a36de17a4f28601eba278a79595e3b35bca769a80d4 datapathConfiguration="&{false false false false false }" interface=lxc0f24a3020b89 k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e4fb26736b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e4fb26736b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e4fb26736b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=19646 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e4fb26736b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1595 identity=19646 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bd12ec4827 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4001 identity=39504 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=bd12ec4827 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4001 identity=39504 ipv4=10.0.0.221 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-t2t5s subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e4fb26736b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1595 identity=19646 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e4fb26736b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1595 identity=19646 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e4fb26736b endpointID=1595 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-gtl97 subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=32f8d30b-5360-4dba-982a-e964f3703eba k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=e4fb26736b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1595 identity=19646 ipv4=10.0.0.242 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-gtl97 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 cfa8e136-68b7-4528-b01f-b9d089492a9e default }" containerID=0e5dcaebac096b147a44b740256c4835bf4683b2090600e4553fc88be32c8e39 datapathConfiguration="&{false false false false false }" interface=lxc5d850e4a02de k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=65252 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3946 identity=65252 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0e5dcaebac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3946 identity=65252 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=endpoint level=info msg="Successful endpoint creation" containerID=0e5dcaebac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3946 identity=65252 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0e5dcaebac endpointID=3946 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-8wm2h subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=ed0b1f28-300c-4511-a316-6194fc3df0bf k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=0e5dcaebac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3946 identity=65252 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-8wm2h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.126 7c19f5dc-7d9a-4d0d-8abd-4fb557c4e304 default }" containerID=72f49f356a7058f3cb3eaae1ac24fec6f9cd581ab06b407e7a480bc439177641 datapathConfiguration="&{false false false false false }" interface=lxca59733d1d78d k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=35544 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3839 identity=35544 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72f49f356a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3839 identity=35544 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq subsys=endpoint level=info msg="Successful endpoint creation" containerID=72f49f356a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3839 identity=35544 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-qhpcq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.152 62815881-cb8a-4dd1-9edb-68706e12a8e7 default }" containerID=d39d2416c5609de19908f136b266692b628e765b4b4ae04100cfce40e735d394 datapathConfiguration="&{false false false false false }" interface=lxc7f4ec29ed968 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d39d2416c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d39d2416c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d39d2416c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=63722 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d39d2416c5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3527 identity=63722 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d39d2416c5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3527 identity=63722 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=endpoint level=info msg="Successful endpoint creation" containerID=d39d2416c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3527 identity=63722 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=d39d2416c5 endpointID=3527 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-k5dtl subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=0c20165d-cd32-4140-a96c-e223d66a4132 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=d39d2416c5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3527 identity=63722 ipv4=10.0.0.152 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-k5dtl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.31 371978fb-7018-4b1b-89e3-9be4d769816f default }" containerID=8de3a76b15c76e268d5b3a27ab5093d22a683bc0ab4abc91ea03a836eb551288 datapathConfiguration="&{false false false false false }" interface=lxcc1a7bc28280a k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8de3a76b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8de3a76b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8de3a76b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=18259 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8de3a76b15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1818 identity=18259 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.134 1f051494-ff4c-479c-b966-9269f9ca98f4 default }" containerID=9a63d2cf37e9369eb91979f1c4c7652ea1a61f116d7fafa461f49a4f562f4b7d datapathConfiguration="&{false false false false false }" interface=lxced0cc269a174 k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9a63d2cf37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9a63d2cf37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9a63d2cf37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=41497 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9a63d2cf37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=563 identity=41497 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8de3a76b15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1818 identity=18259 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq subsys=endpoint level=info msg="Successful endpoint creation" containerID=8de3a76b15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1818 identity=18259 ipv4=10.0.0.31 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-8jswq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9a63d2cf37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=563 identity=41497 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q subsys=endpoint level=info msg="Successful endpoint creation" containerID=9a63d2cf37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=563 identity=41497 ipv4=10.0.0.134 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-dzw9q subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.46 cc970871-ca81-45ab-a241-efa6b3b6b600 default }" containerID=8bb661207dcbe51cb15dfe970e316dbe35b1aaff04f4b6029d86ea23a035d6f8 datapathConfiguration="&{false false false false false }" interface=lxc7c192efc6d12 k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bb661207d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bb661207d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bb661207d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=1710 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bb661207d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=1710 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8bb661207d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=7 identity=1710 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bb661207d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=7 identity=1710 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-v2qvm subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.135 797164d4-5092-47f1-9280-04f0e243beb3 default }" containerID=e0760c79107bc9c36db672912681f23059d9a9cffe9ceffc48cc1d35b500c9f7 datapathConfiguration="&{false false false false false }" interface=lxcf5afc119181f k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=40959 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1118 identity=40959 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0760c7910 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1118 identity=40959 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0760c7910 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1118 identity=40959 ipv4=10.0.0.135 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.208 60d7cd7e-378b-42ef-9bf5-477ff2b974c4 default }" containerID=0f210af858cd9cd1ecd7c1182984e27f561cd9a4901d3ef5c596409e30c0270a datapathConfiguration="&{false false false false false }" interface=lxc8af2b65a5d60 k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f210af858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f210af858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f210af858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=64351 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f210af858 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1014 identity=64351 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f210af858 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1014 identity=64351 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f210af858 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1014 identity=64351 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0f210af858 endpointID=1014 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=0f210af858 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1014 identity=64351 ipv4=10.0.0.208 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-dc134c73-b547-4c35-a894-608938fa7a25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.133 bcbbe50f-59a1-42dc-9dc3-95093ad57b69 default }" containerID=fb5df2dd04e8f9fbdc9467c746bbaa832772974c1066d7f1ed186c6fa3336e81 datapathConfiguration="&{false false false false false }" interface=lxc59a42a38f80d k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb5df2dd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb5df2dd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb5df2dd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identity=53094 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb5df2dd04 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4059 identity=53094 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=fb5df2dd04 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=4059 identity=53094 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb5df2dd04 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=4059 identity=53094 ipv4=10.0.0.133 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.146 c4166db1-6b62-4aa4-850a-b2ed7b9fcbc2 default }" containerID=5e0fbfac4c81cc6d6da0a7d5c64ce19d7f91c74d5a1ece05da4b05434790dced datapathConfiguration="&{false false false false false }" interface=lxc210926e9cc87 k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5e0fbfac4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5e0fbfac4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5e0fbfac4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=58687 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5e0fbfac4c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2020 identity=58687 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5e0fbfac4c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2020 identity=58687 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5e0fbfac4c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2020 identity=58687 ipv4=10.0.0.146 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-mj7h8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.30 8498f20a-e7af-4062-9c03-e2ebfef5eda5 default }" containerID=4ef356a3c9817daee000b878ced48ce9279e5f56acdf6c447554641640dc908f datapathConfiguration="&{false false false false false }" interface=lxc5fde4195285b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=6585 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3184 identity=6585 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4ef356a3c9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3184 identity=6585 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4ef356a3c9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3184 identity=6585 ipv4=10.0.0.30 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.131 4a053822-fe55-4939-baf1-4aafff38d2ea default }" containerID=dc4e12a280e30cc38e6568274914e24a1db62cebff490c7414e86795ea1076c4 datapathConfiguration="&{false false false false false }" interface=lxc452e22ff53ef k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc4e12a280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc4e12a280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc4e12a280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=6758 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc4e12a280 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2105 identity=6758 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=dc4e12a280 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2105 identity=6758 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc4e12a280 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2105 identity=6758 ipv4=10.0.0.131 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-zqzzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.04541003671970624 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.193 25a7bd34-bdfb-4999-bf8d-1f1d43321f68 default }" containerID=15f8b3f533980b560db03c048ecaf36eec4e9e96d2f99820bb9083a1dc900fcb datapathConfiguration="&{false false false false false }" interface=lxc6ca193d9f06a k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=52157 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=891 identity=52157 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=15f8b3f533 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=891 identity=52157 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=15f8b3f533 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=891 identity=52157 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=15f8b3f533 endpointID=891 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-f8pq4 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=c9932589-cab3-41fe-8bff-7ab28b36cf40 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=15f8b3f533 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=891 identity=52157 ipv4=10.0.0.193 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-f8pq4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.92 1d9a390d-3814-4f9f-a2fa-456051c1d063 default }" containerID=32fa682d3ec746502571a33f57c7f959790f721c6d636242be0ec9084b803917 datapathConfiguration="&{false false false false false }" interface=lxc495e61b101b4 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.168 bc8c5996-41ca-4857-bc44-674720349ae8 default }" containerID=8f777903eafc6ccc7f1be7d2dc0c350392c7ee65a4fe9e09e5727226178cd6a5 datapathConfiguration="&{false false false false false }" interface=lxcb42b1827000f k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=11935 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=355 identity=11935 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identity=4700 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2802 identity=4700 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.50 df2aa452-6c92-4efa-8d8f-9710f1f4ad69 default }" containerID=cb8a2271847b95d79bb9fd5d61c5d0b827e4d592d3c375cab2e762bc3192638d datapathConfiguration="&{false false false false false }" interface=lxc4b021612094f k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb8a227184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb8a227184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb8a227184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=9056 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cb8a227184 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=923 identity=9056 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8f777903ea datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=355 identity=11935 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8f777903ea datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=355 identity=11935 ipv4=10.0.0.168 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-95556bb6f-g4n28 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=32fa682d3e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2802 identity=4700 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh subsys=endpoint level=info msg="Successful endpoint creation" containerID=32fa682d3e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2802 identity=4700 ipv4=10.0.0.92 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-9qsjh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=cb8a227184 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=923 identity=9056 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb8a227184 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=923 identity=9056 ipv4=10.0.0.50 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-kwwwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.229 efc93444-acf2-4979-840f-7ba4f8f7a634 default }" containerID=9e20e6f99c666d0c57e5fb09c2b2df5e7df8f30a0731517f57a471befc9d3797 datapathConfiguration="&{false false false false false }" interface=lxcac088c220cc0 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e20e6f99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e20e6f99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e20e6f99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=8154 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e20e6f99c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2189 identity=8154 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e20e6f99c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2189 identity=8154 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e20e6f99c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2189 identity=8154 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9e20e6f99c endpointID=2189 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-8nw88 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=b5f8c78d-93f6-4917-88b6-118631e07c16 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=9e20e6f99c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2189 identity=8154 ipv4=10.0.0.229 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-8nw88 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 dcdb66dd-3d64-4d82-8f1e-8e7998f143ef default }" containerID=18ce575960f49a2b5d27058e2e49f847c72440c3f941fc881040b5d603a86750 datapathConfiguration="&{false false false false false }" interface=lxc38733428a999 k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=18ce575960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=18ce575960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=18ce575960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=64351 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=18ce575960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=297 identity=64351 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=18ce575960 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=297 identity=64351 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=endpoint level=info msg="Successful endpoint creation" containerID=18ce575960 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=64351 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=daemon level=info msg="Delete endpoint request" containerID=18ce575960 endpointID=297 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=18ce575960 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=297 identity=64351 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7250fc45-b276-45de-b937-dff53642750a subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.225 86fd35a4-72b1-4c72-8746-ab9bed7e3bfe default }" containerID=4c20994102ef1f6ae2514babd7a4dd577d305fd6d63e836f289b4bd055542fea datapathConfiguration="&{false false false false false }" interface=lxc535358a08668 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4c20994102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4c20994102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4c20994102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=6196 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4c20994102 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=246 identity=6196 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=4c20994102 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=246 identity=6196 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4c20994102 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=246 identity=6196 ipv4=10.0.0.225 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 124789f0-7d31-4d80-899a-b9466d35a838 default }" containerID=256d995573a4e4fa183090792cd416755b9cd93119ec0ffbc3d39e4890be7dfc datapathConfiguration="&{false false false false false }" interface=lxc61f17dcf6b53 k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=256d995573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=256d995573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=256d995573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=64351 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=256d995573 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=443 identity=64351 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=256d995573 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=443 identity=64351 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=endpoint level=info msg="Successful endpoint creation" containerID=256d995573 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=443 identity=64351 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.72 cb6a05e5-0415-4468-828b-5c1eeea544e5 default }" containerID=2ac1e909a939487f8022b7b65542fe2563840fdc774df5721a9ac37712c0df8b datapathConfiguration="&{false false false false false }" interface=lxc2e842659d899 k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2ac1e909a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2ac1e909a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=endpoint level=info msg="Identity of endpoint changed" containerID=2ac1e909a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=64351 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2ac1e909a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=743 identity=64351 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2ac1e909a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=743 identity=64351 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=endpoint level=info msg="Successful endpoint creation" containerID=2ac1e909a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=64351 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=daemon level=info msg="Delete endpoint request" containerID=256d995573 endpointID=443 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=256d995573 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=443 identity=64351 ipv4=10.0.0.33 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-b45ae565-2e7b-49e3-bd25-f430077e998f subsys=endpoint level=info msg="Delete endpoint request" containerID=2ac1e909a9 endpointID=743 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=2ac1e909a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=743 identity=64351 ipv4=10.0.0.72 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-27e310a5-2d4e-4e41-bae9-8d3d314c02bd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 714b7705-3b9d-4fe9-b701-8c0cfbc2d05a default }" containerID=38eff866b00ab5e5ea5e59e710ed00a4831af11b2caa2207d657ccdd5b596a1d datapathConfiguration="&{false false false false false }" interface=lxce671d356f70c k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=38eff866b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3545 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=38eff866b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3545 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=38eff866b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3545 identity=10302 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=38eff866b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3545 identity=10302 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=38eff866b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3545 identity=10302 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=38eff866b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3545 identity=10302 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 4412b8c0-4e93-48e8-95ec-3b0a72e42c7a default }" containerID=548d7c27af3a6394a05de6a1d08bbde04d7c9edbdbd5f9bdff926ab3bfb567cb datapathConfiguration="&{false false false false false }" interface=lxc93ad3461961d k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=548d7c27af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=548d7c27af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=548d7c27af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=25968 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=548d7c27af datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=360 identity=25968 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=548d7c27af datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=360 identity=25968 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=548d7c27af datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=360 identity=25968 ipv4=10.0.0.69 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.127 4e27c723-c733-4cfc-93db-2dac37adbf7d default }" containerID=26b0c8c520ce04edfabb0884b1b14304b33275e0f3599e3cce7e27d2b07806db datapathConfiguration="&{false false false false false }" interface=lxc4ddcefd4ba3e k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26b0c8c520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26b0c8c520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26b0c8c520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identity=8706 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26b0c8c520 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3095 identity=8706 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=26b0c8c520 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3095 identity=8706 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw subsys=endpoint level=info msg="Successful endpoint creation" containerID=26b0c8c520 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3095 identity=8706 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/keystone-api-7fc9fb6cc5-c8kmw subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.38 b7890adb-82de-4380-b6b5-a1ce48a79216 default }" containerID=403f627a57393d7702e66097e65beaeae8f462fa2206931212490803920acee2 datapathConfiguration="&{false false false false false }" interface=lxc80538f552733 k8sPodName=openstack/keystone-credential-setup-7lsdq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=403f627a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=403f627a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=403f627a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=3840 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=403f627a57 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=238 identity=3840 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=403f627a57 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=238 identity=3840 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=endpoint level=info msg="Successful endpoint creation" containerID=403f627a57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=3840 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=403f627a57 endpointID=238 k8sNamespace=openstack k8sPodName=keystone-credential-setup-7lsdq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=b8fb2c79-4126-46d8-89bb-58207658c633 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=403f627a57 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=238 identity=3840 ipv4=10.0.0.38 ipv6= k8sPodName=openstack/keystone-credential-setup-7lsdq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.196 d29793d3-f070-4515-9f85-f198f10761b4 default }" containerID=63510c6d9b54d21ee36d1ec09e128610524fc56ff7e5ad378227be78b7510c69 datapathConfiguration="&{false false false false false }" interface=lxc8b230d365532 k8sPodName=openstack/keystone-db-init-t86wq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=63510c6d9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=63510c6d9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=63510c6d9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=4855 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=63510c6d9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1689 identity=4855 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=63510c6d9b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1689 identity=4855 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=endpoint level=info msg="Successful endpoint creation" containerID=63510c6d9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1689 identity=4855 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=63510c6d9b endpointID=1689 k8sNamespace=openstack k8sPodName=keystone-db-init-t86wq subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1de36e5b-a086-44e1-8caa-d566c64a77af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=63510c6d9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1689 identity=4855 ipv4=10.0.0.196 ipv6= k8sPodName=openstack/keystone-db-init-t86wq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 748e8c0e-f15a-4add-bcf4-9ea23f45c84a default }" containerID=b8163e179469ab665f461d58a6a6f2929bb738c81229eecbd13d1aac822ae890 datapathConfiguration="&{false false false false false }" interface=lxc04f6c8aace45 k8sPodName=openstack/keystone-fernet-setup-dkt86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identity=21974 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2225 identity=21974 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8163e1794 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2225 identity=21974 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8163e1794 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2225 identity=21974 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8163e1794 endpointID=2225 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-dkt86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=7d8a28e5-fecf-4e87-81b9-31318a18fac7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=b8163e1794 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2225 identity=21974 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-dkt86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.28 23c12011-b234-48c8-8d4d-fadac4c54c9c default }" containerID=a17d00f33056493d0568eac43e842ae843d9751b5e102fa437798a3a8ac8f51d datapathConfiguration="&{false false false false false }" interface=lxc4a19c08fbe52 k8sPodName=openstack/keystone-db-sync-jqgcf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a17d00f330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a17d00f330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a17d00f330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=32240 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a17d00f330 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2377 identity=32240 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a17d00f330 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2377 identity=32240 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=endpoint level=info msg="Successful endpoint creation" containerID=a17d00f330 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2377 identity=32240 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a17d00f330 endpointID=2377 k8sNamespace=openstack k8sPodName=keystone-db-sync-jqgcf subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=64266edb-7c0b-4cf7-bab7-16ce168aa57d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a17d00f330 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2377 identity=32240 ipv4=10.0.0.28 ipv6= k8sPodName=openstack/keystone-db-sync-jqgcf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.118 0f55d5d1-b91b-4fc4-85b7-aa2de213f02f default }" containerID=5d780f4d15bf0015b55b64148b0718b9b4292aa0b14bf7fcef36021dc1c17a4a datapathConfiguration="&{false false false false false }" interface=lxcbfdbd677404c k8sPodName=openstack/keystone-rabbit-init-t2g86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=8657 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=439 identity=8657 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5d780f4d15 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=439 identity=8657 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5d780f4d15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=439 identity=8657 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5d780f4d15 endpointID=439 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-t2g86 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=2df5d577-daa1-4b51-822a-bd7ffc0496ef k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5d780f4d15 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=439 identity=8657 ipv4=10.0.0.118 ipv6= k8sPodName=openstack/keystone-rabbit-init-t2g86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 8b3da813-dc39-4eac-ac59-74d88b5ea931 default }" containerID=8bbeee4bc7f787f35786c05ed7772fed23497d453b1d10ac92b0d5c8f6f6a554 datapathConfiguration="&{false false false false false }" interface=lxc7184445aec40 k8sPodName=openstack/keystone-domain-manage-kf9hk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=57474 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3395 identity=57474 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8bbeee4bc7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3395 identity=57474 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=endpoint level=info msg="Successful endpoint creation" containerID=8bbeee4bc7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3395 identity=57474 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8bbeee4bc7 endpointID=3395 k8sNamespace=openstack k8sPodName=keystone-domain-manage-kf9hk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=1e3b8443-88af-40a3-9f6c-c94937c9fcdd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=8bbeee4bc7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3395 identity=57474 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/keystone-domain-manage-kf9hk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 e51e3a91-815b-4798-a8d9-0d08bc676764 default }" containerID=365c14d9568ef03a1b899f64f24d2e58373786eb63123681d5e4cbe424f14975 datapathConfiguration="&{false false false false false }" interface=lxca3c4e74420fc k8sPodName=openstack/keystone-bootstrap-q2sht labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=365c14d956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=365c14d956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=365c14d956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=24403 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=365c14d956 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1075 identity=24403 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=365c14d956 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1075 identity=24403 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=endpoint level=info msg="Successful endpoint creation" containerID=365c14d956 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1075 identity=24403 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=365c14d956 endpointID=1075 k8sNamespace=openstack k8sPodName=keystone-bootstrap-q2sht subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=84396fcc-85b8-4109-887b-7d017f8be7c0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=365c14d956 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1075 identity=24403 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-bootstrap-q2sht subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 420557c7-fde8-40c9-939d-5afef2ee0c4b default }" containerID=9516df6561d5cc444bd5e406389793e4b0ba2534e5c246ae621654b088cda7b8 datapathConfiguration="&{false false false false false }" interface=lxceccba468613d k8sPodName=openstack/horizon-5dd877bd54-vmxrt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=7892 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2087 identity=7892 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.26 7e8c40cb-aa55-45bd-8807-3e923e68887c default }" containerID=3cc498915b60af28e489e33e7e36c2e84f758645e56f552f736fff836003ec50 datapathConfiguration="&{false false false false false }" interface=lxc16d986e5169f k8sPodName=openstack/horizon-5dd877bd54-5g2nw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3cc498915b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3cc498915b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3cc498915b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=7892 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3cc498915b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=666 identity=7892 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.117 c0aa1216-9f7d-4913-8cdd-0d30a6ddac51 default }" containerID=1df184038a11188b943f21bb915aff7a45ab62daf1a594345543bbc307747652 datapathConfiguration="&{false false false false false }" interface=lxc888936e109e4 k8sPodName=openstack/horizon-5dd877bd54-hj65h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1df184038a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1df184038a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1df184038a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=7892 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1df184038a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=573 identity=7892 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3cc498915b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=666 identity=7892 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3cc498915b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=666 identity=7892 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/horizon-5dd877bd54-5g2nw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9516df6561 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2087 identity=7892 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt subsys=endpoint level=info msg="Successful endpoint creation" containerID=9516df6561 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2087 identity=7892 ipv4=10.0.0.97 ipv6= k8sPodName=openstack/horizon-5dd877bd54-vmxrt subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.115 4eeb9928-90b4-4a5e-8148-0f829b8e7d43 default }" containerID=60f3878f219f7d650ed729ea83b3d5e357dd1620cf8012975a92beca7caaea4c datapathConfiguration="&{false false false false false }" interface=lxcac0d629ad4ea k8sPodName=openstack/horizon-db-init-hvrld labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=60f3878f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=60f3878f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=60f3878f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=57040 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=60f3878f21 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1494 identity=57040 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1df184038a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=573 identity=7892 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h subsys=endpoint level=info msg="Successful endpoint creation" containerID=1df184038a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=573 identity=7892 ipv4=10.0.0.117 ipv6= k8sPodName=openstack/horizon-5dd877bd54-hj65h subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=60f3878f21 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1494 identity=57040 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=endpoint level=info msg="Successful endpoint creation" containerID=60f3878f21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1494 identity=57040 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=60f3878f21 endpointID=1494 k8sNamespace=openstack k8sPodName=horizon-db-init-hvrld subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=3875bfa9-13b0-4d2d-b992-acb0ba512bc3 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=60f3878f21 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1494 identity=57040 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/horizon-db-init-hvrld subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 27932c2a-147c-4d72-ad89-5b2c8528464b default }" containerID=8e420cce6f549f4f213a906dd884c2b86968881dfa4aad31d316ffbc4d46326e datapathConfiguration="&{false false false false false }" interface=lxcb0cd3722273d k8sPodName=openstack/horizon-db-sync-hlsmn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8e420cce6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2079 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8e420cce6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2079 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8e420cce6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2079 identity=23513 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8e420cce6f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2079 identity=23513 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8e420cce6f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2079 identity=23513 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=endpoint level=info msg="Successful endpoint creation" containerID=8e420cce6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2079 identity=23513 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=daemon level=info msg="Delete endpoint request" containerID=8e420cce6f endpointID=2079 k8sNamespace=openstack k8sPodName=horizon-db-sync-hlsmn subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=e5cd20d1-c64f-462c-a03f-a0d0a53023b0 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=8e420cce6f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2079 identity=23513 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/horizon-db-sync-hlsmn subsys=endpoint