level=info msg="Memory available for map entries (0.003% of 67421642752B): 168554106B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=2.246866ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="105.653µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.890599ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="15.961µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=115.224441ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="31.701µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="31.92µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="120.092µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="111.962µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="141.323µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="565.342µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="2.41µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=13.914998ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=8.819261ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="40.24µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="40.881µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="231.235µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="106.503µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="76.552µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=51.983675ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="394.828µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="5.38µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="2.55µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.169.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=104.242634ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="7.52µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.309112ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="3.2µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.297633ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.13µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.51µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="5.69µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="29.511µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="40.301µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="54.072µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="268.646µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="4.41µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="9.63µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="193.054µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="710.794µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.004041ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.42µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="17.08µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.169 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.169 ipAddr.ipv6="" k8sNodeIP=199.204.45.169 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.169" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.246" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.169" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.169} {CiliumInternalIP 10.0.0.246}] 10.0.0.0/24 [] [] 10.0.0.88 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:46805" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.626559781s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="12.55µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="5.99µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Start hook executed" duration="30.61µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="3.15µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1997 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.610106414s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=292.084606ms file-path=/var/run/cilium/state/templates/65a93dedf9b75b71fe7e58b0d879ad4f21e0afa4ccd0f637e5833ea8cad6f586/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1997 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.248 f3eb4abc-b556-4f02-b696-ee4a86c7c08e default }" containerID=35074d3e7f15df0c9a01949c012f84e8b854063f820972bf6241416246d673c7 datapathConfiguration="&{false false false false false }" interface=lxc71699f74c3eb k8sPodName=kube-system/coredns-7c96b6546b-47dfr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35074d3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35074d3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.159 096c37e3-ead1-4443-9009-819b22302fcb default }" containerID=801bc71d3a17dd3c20ad6bcde56c63a0c23f5d6791a3c111fb69628b9cd00109 datapathConfiguration="&{false false false false false }" interface=lxc483cfc5c51a8 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35074d3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=4805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=35074d3e7f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3275 identity=4805 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=endpoint level=info msg="Invalid state transition skipped" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=4713 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=4713 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1077 identity=4 identityLabels="reserved:health" ipv4=10.0.0.88 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.066723201s file-path=/var/run/cilium/state/templates/29fa62d922e7b9c63b41522ffdeb898ef77169c9072aedfb644c5d900b37cadd/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=801bc71d3a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2336 identity=4713 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=endpoint level=info msg="Successful endpoint creation" containerID=801bc71d3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2336 identity=4713 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=35074d3e7f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3275 identity=4805 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=endpoint level=info msg="Successful endpoint creation" containerID=35074d3e7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3275 identity=4805 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1077 identity=4 ipv4=10.0.0.88 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Delete endpoint request" containerID=801bc71d3a endpointID=2336 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-4bbnd subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=8ef6c07f-81e3-46b8-a736-694dced8dbc6 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=801bc71d3a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2336 identity=4713 ipv4=10.0.0.159 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-4bbnd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.43 358fe05f-fcd1-420e-9a38-f0a8897979a9 default }" containerID=fb3f6191794b5ae6e8e03edb3e440402060fa022de051ecbe2f539b9b084cb2e datapathConfiguration="&{false false false false false }" interface=lxc106e60a96d65 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb3f619179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb3f619179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb3f619179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=22491 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=fb3f619179 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2937 identity=22491 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fb3f619179 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2937 identity=22491 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb3f619179 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2937 identity=22491 ipv4=10.0.0.43 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-7bxz9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1997 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01997 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01997 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01997 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01997:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1997 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.232 b347440d-72da-4164-84d9-37f8b8b913f3 default }" containerID=4f1bd144f3fd949ac32176dff9e07c160941a67d892a3e4c48aba0bfd1d1cc2b datapathConfiguration="&{false false false false false }" interface=lxc6ad9587ab828 k8sPodName=kube-system/coredns-67659f764b-mn2pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4f1bd144f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4f1bd144f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw subsys=endpoint level=info msg="Identity of endpoint changed" containerID=4f1bd144f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=4805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4f1bd144f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1683 identity=4805 ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.30 9d6f5080-c8fb-41cb-8b0d-f3b3bc8dc17f default }" containerID=f85d0bf2bf0bc68118c77768bd82d57247c2e4f911b0720d5d5d01e836a1649f datapathConfiguration="&{false false false false false }" interface=lxcaa2c45405aa7 k8sPodName=kube-system/coredns-67659f764b-ph5zv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f85d0bf2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f85d0bf2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f85d0bf2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=4805 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f85d0bf2bf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=59 identity=4805 ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4f1bd144f3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1683 identity=4805 ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=4f1bd144f3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1683 identity=4805 ipv4=10.0.0.232 ipv6= k8sPodName=kube-system/coredns-67659f764b-mn2pw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f85d0bf2bf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=59 identity=4805 ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv subsys=endpoint level=info msg="Successful endpoint creation" containerID=f85d0bf2bf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=59 identity=4805 ipv4=10.0.0.30 ipv6= k8sPodName=kube-system/coredns-67659f764b-ph5zv subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 5062c4e2-5bcc-4644-92ba-6ec4ebbf757f default }" containerID=302183093101250a3279f94a840e3b7ac9b45ef76030be91fe4b51560491b0d6 datapathConfiguration="&{false false false false false }" interface=lxc7c88bce62bf1 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3021830931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3021830931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3021830931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=32486 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3021830931 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1895 identity=32486 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3021830931 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1895 identity=32486 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns subsys=endpoint level=info msg="Successful endpoint creation" containerID=3021830931 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1895 identity=32486 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-g5bns subsys=daemon level=info msg="Delete endpoint request" containerID=35074d3e7f endpointID=3275 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-47dfr subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=35074d3e7f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3275 identity=4805 ipv4=10.0.0.248 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-47dfr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.2 5d8a8e14-7bff-45c0-b8f2-2ce97c7382f1 default }" containerID=2249adfbda4876b0ed8e30010540da35e8820c98780a2a1912b2985b4419e59e datapathConfiguration="&{false false false false false }" interface=lxc3b35b260c8d7 k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2249adfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2249adfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2249adfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=6250 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2249adfbda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3661 identity=6250 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.44 063613c6-9208-434e-8ef5-f72ca711015b default }" containerID=07edeecc180fd224c2de20014c58d9f2f920b3ddf76987f69f0e82d1d6745b2e datapathConfiguration="&{false false false false false }" interface=lxc3783d5a077f1 k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=07edeecc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=07edeecc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.136 c0caef9b-ee87-4f6f-b280-a64c4ebbded8 default }" containerID=0a8a1c258f82b5433fc2327bdb6dc57d1ea781e616798000487d1aa9ad3e9d7f datapathConfiguration="&{false false false false false }" interface=lxca492590a8868 k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a8a1c258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a8a1c258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=07edeecc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=12832 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 oldIdentity="no identity" subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Waiting for endpoint to be generated" containerID=07edeecc18 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1093 identity=12832 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a8a1c258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=16213 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a8a1c258f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=585 identity=16213 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2249adfbda datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3661 identity=6250 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw subsys=endpoint level=info msg="Successful endpoint creation" containerID=2249adfbda datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3661 identity=6250 ipv4=10.0.0.2 ipv6= k8sPodName=cert-manager/cert-manager-webhook-9997c64fc-8lpkw subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=07edeecc18 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1093 identity=12832 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 subsys=endpoint level=info msg="Successful endpoint creation" containerID=07edeecc18 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1093 identity=12832 ipv4=10.0.0.44 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-84f45b698d-bln99 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=0a8a1c258f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=585 identity=16213 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a8a1c258f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=585 identity=16213 ipv4=10.0.0.136 ipv6= k8sPodName=cert-manager/cert-manager-75969b45cf-xsp5s subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.89 c9ef784a-9b79-45ad-b0d7-2bce3bced103 default }" containerID=9219fac9e2016b82b02918830f40f1a7be5fcf5a8635dd6dbd5800a9257061d3 datapathConfiguration="&{false false false false false }" interface=lxcc4be6b1c93cb k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9219fac9e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9219fac9e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9219fac9e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=17990 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9219fac9e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1084 identity=17990 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9219fac9e2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1084 identity=17990 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=endpoint level=info msg="Successful endpoint creation" containerID=9219fac9e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1084 identity=17990 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9219fac9e2 endpointID=1084 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-swnlb subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10 k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=be9cf443-155b-4159-a5b9-23ee16f1ea10 k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=9219fac9e2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1084 identity=17990 ipv4=10.0.0.89 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-swnlb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 d30f45a6-e3d0-49e1-ae79-8b376851f75e default }" containerID=b4bf0a6ef6910da07bb47d50a0861863043e2b3897f24d33dea4dd586664b0a2 datapathConfiguration="&{false false false false false }" interface=lxc5182e8f4831c k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4bf0a6ef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4bf0a6ef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=320240ef-d474-4af8-9995-8098fd561047,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=320240ef-d474-4af8-9995-8098fd561047,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=320240ef-d474-4af8-9995-8098fd561047;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=320240ef-d474-4af8-9995-8098fd561047;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=b4bf0a6ef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=9482 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=320240ef-d474-4af8-9995-8098fd561047,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=320240ef-d474-4af8-9995-8098fd561047,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4bf0a6ef6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=9482 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4bf0a6ef6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=649 identity=9482 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4bf0a6ef6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=649 identity=9482 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4bf0a6ef6 endpointID=649 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-f5jr7 subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=320240ef-d474-4af8-9995-8098fd561047 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=320240ef-d474-4af8-9995-8098fd561047 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=b4bf0a6ef6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=649 identity=9482 ipv4=10.0.0.176 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-f5jr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.74 b53cc347-bb11-4ac6-8369-f7bc51e42442 default }" containerID=cb0657afb93a96eecd53b7187789ec58393a3a677b7a057df06e29afa242a9a7 datapathConfiguration="&{false false false false false }" interface=lxc87407702a0b3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cb0657afb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cb0657afb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cb0657afb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=3205 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=cb0657afb9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=187 identity=3205 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cb0657afb9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=187 identity=3205 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc subsys=endpoint level=info msg="Successful endpoint creation" containerID=cb0657afb9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=187 identity=3205 ipv4=10.0.0.74 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-s5xfc subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.96 625e826f-74a9-4d63-b51d-ac59d63d9b16 default }" containerID=48e9fb4d175bb0d8751c7dd2b417fa020f62f52362312d5ff1c247d59e4e836f datapathConfiguration="&{false false false false false }" interface=lxc5c85cc51b477 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48e9fb4d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48e9fb4d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48e9fb4d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=20020 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48e9fb4d17 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=140 identity=20020 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48e9fb4d17 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=140 identity=20020 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=endpoint level=info msg="Successful endpoint creation" containerID=48e9fb4d17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=140 identity=20020 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48e9fb4d17 endpointID=140 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-gqvmr subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=78e0625a-f25d-4841-a0f4-fbe3111a15ac k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=48e9fb4d17 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=140 identity=20020 ipv4=10.0.0.96 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-gqvmr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 e8ada0f8-3e04-4687-a717-3ce29f29c007 default }" containerID=1c19cd2a5a27d1f56a21b8108e3e326fd726156b374d614cabf887e21cf9e104 datapathConfiguration="&{false false false false false }" interface=lxc889091f639eb k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=10347 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=71 identity=10347 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.89 87a1a10a-a3e7-4509-a1fd-3e65f32814f0 default }" containerID=7ee9870d7d5e8ff150dff821ae5dae422811ffeb045c7f6dd6055d63304034cc datapathConfiguration="&{false false false false false }" interface=lxc1a3241033cfe k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ee9870d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ee9870d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ee9870d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=44906 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:helm.sh/chart=rabbitmq-cluster-operator-2.6.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ee9870d7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2464 identity=44906 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1c19cd2a5a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=71 identity=10347 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp subsys=endpoint level=info msg="Successful endpoint creation" containerID=1c19cd2a5a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=71 identity=10347 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-69996b7f7f-7q6cp subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=7ee9870d7d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2464 identity=44906 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ee9870d7d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2464 identity=44906 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-6b5c8b7cdc-scrk6 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.224 f50e4494-ad73-409b-abb6-750ab336fd9a default }" containerID=a7e26d130857cf0d985cf38c005e8a66779ccfbec1f589ef1ba99f0474d862d8 datapathConfiguration="&{false false false false false }" interface=lxc48adb688d326 k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a7e26d1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a7e26d1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a7e26d1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=55286 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a7e26d1308 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2332 identity=55286 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a7e26d1308 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2332 identity=55286 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb subsys=endpoint level=info msg="Successful endpoint creation" containerID=a7e26d1308 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2332 identity=55286 ipv4=10.0.0.224 ipv6= k8sPodName=openstack/pxc-operator-59d66cbc78-5l6bb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.190 749765b3-c285-47cd-997e-bbbf7fd67bdb default }" containerID=aec0e7f3153a47b38401abdb21b08d20e4277bbed6f22aca761e3470db3fb6c0 datapathConfiguration="&{false false false false false }" interface=lxc576007608ab5 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aec0e7f315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aec0e7f315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=aec0e7f315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=4727 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=aec0e7f315 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1903 identity=4727 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.100 fec4dd10-cdc1-4dc2-95df-b8deab9dbf35 default }" containerID=dc972b6ec396f3e46e3c22a4f32ebb7b399bf812109bc4205015b5054ac45cfc datapathConfiguration="&{false false false false false }" interface=lxc16a5c4d07b4b k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc972b6ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc972b6ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc972b6ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc972b6ec3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=31 identity=40901 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aec0e7f315 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1903 identity=4727 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aec0e7f315 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1903 identity=4727 ipv4=10.0.0.190 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc972b6ec3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=31 identity=40901 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc972b6ec3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=40901 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc972b6ec3 endpointID=31 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dc972b6ec3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=31 identity=40901 ipv4=10.0.0.100 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-174c1a28-5a08-439b-a135-16c1e3d706e9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.205 c9cce2fd-eb92-4e95-8f17-c29eac99d9ad default }" containerID=e7d522da63a7153325fa69cb4d8b25f83afee5270946c84b597153d5bca6ad08 datapathConfiguration="&{false false false false false }" interface=lxc3efbe155805b k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=3418 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1402 identity=3418 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e7d522da63 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1402 identity=3418 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e7d522da63 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1402 identity=3418 ipv4=10.0.0.205 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.231 bdfef761-bed4-45c3-92ce-860fb96dae6b default }" containerID=3a423ddae1aedac3b5fa99113c95b32816e0a00dd9d3f22c087b7cfe94183dd5 datapathConfiguration="&{false false false false false }" interface=lxcd6a1392aed9b k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a423ddae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a423ddae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-16.0.3;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a423ddae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=27622 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-16.0.3,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a423ddae1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1701 identity=27622 ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a423ddae1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1701 identity=27622 ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a423ddae1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1701 identity=27622 ipv4=10.0.0.231 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.173 f031931e-100f-49ce-b8ad-a57e5aa60c05 default }" containerID=a8107da1566a1c46fb70a33b216493ec153566b18de58c29f51fa6659e3c7c7e datapathConfiguration="&{false false false false false }" interface=lxc60555ea279b4 k8sPodName=monitoring/node-feature-discovery-worker-zlm86 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identity=32304 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3720 identity=32304 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.233 a78daf25-5263-4304-8eea-c2dca64736bb default }" containerID=2b5188250cea3e5236970e59a83498c07710804fe03f4c9e093d327af17b3611 datapathConfiguration="&{false false false false false }" interface=lxcf47b1c9b0ff5 k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2b5188250c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2b5188250c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2b5188250c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identity=15526 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2b5188250c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2708 identity=15526 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a8107da156 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3720 identity=32304 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a8107da156 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3720 identity=32304 ipv4=10.0.0.173 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-zlm86 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=2b5188250c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2708 identity=15526 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg subsys=endpoint level=info msg="Successful endpoint creation" containerID=2b5188250c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2708 identity=15526 ipv4=10.0.0.233 ipv6= k8sPodName=monitoring/node-feature-discovery-master-68cf466d5f-txvjg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.198 64116c0f-a3ca-41bc-9088-b574cfc37e3a default }" containerID=41f90036a9cf79b99eb2f49a37cc6b61dc7e0e0b582260bd0a9d19585e33717f datapathConfiguration="&{false false false false false }" interface=lxce2bbcb894711 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41f90036a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41f90036a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=41f90036a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=14742 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41f90036a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=643 identity=14742 ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41f90036a9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=643 identity=14742 ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj subsys=endpoint level=info msg="Successful endpoint creation" containerID=41f90036a9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=643 identity=14742 ipv4=10.0.0.198 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-wcncj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1997 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SCE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_01997 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_01997 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_01997 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_01997:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1997 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.0120084678128424 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.132 d208a904-5900-4363-9754-de40147e4a30 default }" containerID=ceb4a81ef982d7e6100dc51a751723e5f7d0b3e81f80cba6dbf28bbe1d2688e4 datapathConfiguration="&{false false false false false }" interface=lxc9e4ac1878ab6 k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ceb4a81ef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2591 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ceb4a81ef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2591 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=ceb4a81ef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2591 identity=23206 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ceb4a81ef9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2591 identity=23206 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ceb4a81ef9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2591 identity=23206 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=endpoint level=info msg="Successful endpoint creation" containerID=ceb4a81ef9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2591 identity=23206 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ceb4a81ef9 endpointID=2591 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-8hvnk subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=f88e48fb-d3c3-441d-91bd-f0d51c8ac86c k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=ceb4a81ef9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2591 identity=23206 ipv4=10.0.0.132 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-8hvnk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.219 092516c5-648d-43b8-9143-0fafd5d35b66 default }" containerID=49a6c3e5c6c5d0f064a72b31ccec8531ea3952b6da2e0028dce2926337e17e9c datapathConfiguration="&{false false false false false }" interface=lxc5e25ff8207ff k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.234 872ee6f3-b0c1-49df-af40-0395bbfc2581 default }" containerID=03e94c3eaaf3f5b0359ed09e943ad7eb84e5ee69e032912f80ea4bd2d0d81c6b datapathConfiguration="&{false false false false false }" interface=lxcba627b364b60 k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l subsys=endpoint level=info msg="New endpoint" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.18.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=25699 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.18.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1942 identity=25699 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:chart=kube-prometheus-stack-58.1.3;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=8734 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-58.1.3,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1003 identity=8734 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 0e59b4ec-3322-4c00-89f7-f8dd6f4a1f82 default }" containerID=3035b9d91e6daa02a8fb58f0ab3b0149a4eed837d42fa1a3daeae88847f2669b datapathConfiguration="&{false false false false false }" interface=lxc43ea274416c8 k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3035b9d91e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3035b9d91e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3035b9d91e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=3061 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3035b9d91e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3821 identity=3061 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49a6c3e5c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1942 identity=25699 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l subsys=endpoint level=info msg="Successful endpoint creation" containerID=49a6c3e5c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1942 identity=25699 ipv4=10.0.0.219 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-c7bd54d7-5d95l subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3035b9d91e datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3821 identity=3061 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d subsys=endpoint level=info msg="Successful endpoint creation" containerID=3035b9d91e datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3821 identity=3061 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-6fff46b478-lxt2d subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=03e94c3eaa datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1003 identity=8734 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh subsys=endpoint level=info msg="Successful endpoint creation" containerID=03e94c3eaa datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1003 identity=8734 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cc88b86d6-zkjdh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.31 5eb75a11-1f75-4620-b728-3a8b93f66d5a default }" containerID=4e405f832db97777689c85303f7852aacdb286aa8bc2ecabf823596848055161 datapathConfiguration="&{false false false false false }" interface=lxce146356e1f89 k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4e405f832d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4e405f832d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=58.1.3;k8s:batch.kubernetes.io/controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-58.1.3;k8s:controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4e405f832d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=14459 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=58.1.3,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-58.1.3,k8s:controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4e405f832d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3186 identity=14459 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4e405f832d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3186 identity=14459 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=4e405f832d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3186 identity=14459 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4e405f832d endpointID=3186 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-rfgtj subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=58.1.3 k8s:batch.kubernetes.io/controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-58.1.3 k8s:controller-uid=bf638750-9a20-49b2-ae3e-deb1e8886a88 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=4e405f832d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3186 identity=14459 ipv4=10.0.0.31 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-rfgtj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.161 13a42e27-ccb6-489b-842a-86f1a6c8f5cf default }" containerID=dbcf9199ee989ceea28f9ecab9c75190694fc926be5596078d0c8acc4068095c datapathConfiguration="&{false false false false false }" interface=lxc36b92b7f2460 k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbcf9199ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbcf9199ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbcf9199ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dbcf9199ee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=222 identity=40901 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbcf9199ee datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=222 identity=40901 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbcf9199ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=222 identity=40901 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.69 91126117-bea7-48a1-b775-e1276e58344c default }" containerID=8c265f2449c99e877a7316cd10f1bd844737a4099659f90adc479e42a067627a datapathConfiguration="&{false false false false false }" interface=lxc6cb18b3fe26f k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c265f2449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c265f2449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8c265f2449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8c265f2449 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1374 identity=40901 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c265f2449 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1374 identity=40901 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c265f2449 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1374 identity=40901 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=daemon level=info msg="Delete endpoint request" containerID=dbcf9199ee endpointID=222 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=dbcf9199ee datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=222 identity=40901 ipv4=10.0.0.161 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-75aa276a-35d2-432a-bc38-5f6e9fc87fbd subsys=endpoint level=info msg="Delete endpoint request" containerID=8c265f2449 endpointID=1374 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8c265f2449 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1374 identity=40901 ipv4=10.0.0.69 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bcb03fac-da54-4f76-95c3-7527270aa4f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.130 ac03889a-283e-4c00-a853-5dd8f0e4d2ed default }" containerID=e1b994f0b08d7810f35ca8721b8e38fd8a1aee79fe15bea42705bad2005e0c8a datapathConfiguration="&{false false false false false }" interface=lxc4ca03b3ddb1d k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1b994f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1b994f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1b994f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=48879 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1b994f0b0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=174 identity=48879 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1b994f0b0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=174 identity=48879 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1b994f0b0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=174 identity=48879 ipv4=10.0.0.130 ipv6= k8sPodName=monitoring/loki-gateway-5cc45946cd-bch8c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.55 dfd84a66-8c3d-4294-b23f-8b3a39b92f4d default }" containerID=af15595263131fcfe6a23fec21f2fa823220575220a2bfd4f1dc202e4f007224 datapathConfiguration="&{false false false false false }" interface=lxcdcdb98345f77 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af15595263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af15595263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af15595263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=10791 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af15595263 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=108 identity=10791 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af15595263 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=108 identity=10791 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=af15595263 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=108 identity=10791 ipv4=10.0.0.55 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.3 9d8d31d8-1411-48f7-91c0-2b34f90a62ea default }" containerID=0a3121fb2b1eedc37bfd39f025fb6c871955b37fabe520c5c71608e5b1e0ff0d datapathConfiguration="&{false false false false false }" interface=lxcdcbbed27cf71 k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0a3121fb2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0a3121fb2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0a3121fb2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=3867 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0a3121fb2b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3590 identity=3867 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0a3121fb2b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3590 identity=3867 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0a3121fb2b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3590 identity=3867 ipv4=10.0.0.3 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.18 c095e4d1-d0f5-4059-8b70-93a498173b4e default }" containerID=b3f7e1aaa4deabaa85beaf730393657edb7a9d9977f5419ddcf740442e7fe37b datapathConfiguration="&{false false false false false }" interface=lxcba61592d3dfb k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b3f7e1aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b3f7e1aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b3f7e1aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b3f7e1aaa4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1449 identity=40901 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b3f7e1aaa4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1449 identity=40901 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b3f7e1aaa4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1449 identity=40901 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.162 fd084faa-0864-44d0-bfc5-daaa344dd88b default }" containerID=f652ceb569ec92c55f187f879bec8cccf8495211d6220c7e0778807f84d20000 datapathConfiguration="&{false false false false false }" interface=lxc9b7eb443b55e k8sPodName=monitoring/vector-pd9tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f652ceb569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f652ceb569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f652ceb569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identity=26676 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f652ceb569 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=428 identity=26676 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f652ceb569 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=428 identity=26676 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=f652ceb569 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=428 identity=26676 ipv4=10.0.0.162 ipv6= k8sPodName=monitoring/vector-pd9tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b3f7e1aaa4 endpointID=1449 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b3f7e1aaa4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1449 identity=40901 ipv4=10.0.0.18 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-bf28857c-3555-4cd1-a33b-b51fa2362ce4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.45 ce55a170-8c4f-4908-ac98-4d2957c06a46 default }" containerID=aea72c9fe7e51c0590bc077043aff1a6f1138a098681c6e982076fdfb52805ce datapathConfiguration="&{false false false false false }" interface=lxc5a376fce11a5 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identity=4982 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2838 identity=4982 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=aea72c9fe7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2838 identity=4982 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=aea72c9fe7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2838 identity=4982 ipv4=10.0.0.45 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.104 be094e29-ad52-46b3-b03e-9bc58df8f5d0 default }" containerID=c82f29271611bd9ba9adc8927d252ef299bdcf02a628f9a41eac70bf34daf2c8 datapathConfiguration="&{false false false false false }" interface=lxcb2bfceda2a51 k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=prometheus-pushgateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=prometheus-pushgateway;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=2663 identityLabels="k8s:app=prometheus-pushgateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=prometheus-pushgateway" ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3680 identity=2663 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c82f292716 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3680 identity=2663 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c82f292716 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3680 identity=2663 ipv4=10.0.0.104 ipv6= k8sPodName=monitoring/prometheus-pushgateway-5c694d99cc-mnprh subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.244 cbdb793c-968e-46fa-a373-d686d4294585 default }" containerID=cdcce9200f1db0f8a5686430af3cc37aafa0761a8a49963ea11e4f3261a05b20 datapathConfiguration="&{false false false false false }" interface=lxcc65ec6b957c5 k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identity=50971 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1550 identity=50971 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=cdcce9200f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1550 identity=50971 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq subsys=endpoint level=info msg="Successful endpoint creation" containerID=cdcce9200f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1550 identity=50971 ipv4=10.0.0.244 ipv6= k8sPodName=openstack/memcached-memcached-c47d949f5-4rdpq subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.16 34c028ca-ec65-40d0-a400-872d3d958047 default }" containerID=554138f51a79c59d6634e46ef22c5a889e26680927890051f6d8c26221056d24 datapathConfiguration="&{false false false false false }" interface=lxcecb4310d2dea k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=554138f51a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=554138f51a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=554138f51a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=554138f51a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=435 identity=40901 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=554138f51a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=435 identity=40901 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=endpoint level=info msg="Successful endpoint creation" containerID=554138f51a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=435 identity=40901 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=daemon level=info msg="Delete endpoint request" containerID=554138f51a endpointID=435 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=554138f51a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=435 identity=40901 ipv4=10.0.0.16 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-5af48ba8-737d-4613-b800-646c819bd30e subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.41 fc7fe6ed-fdcb-457c-b931-941340e25312 default }" containerID=b25b8e64ff05569c6b65d077d43056dcb7653506428f1d64d2ed2ba10fc3f579 datapathConfiguration="&{false false false false false }" interface=lxc715bb09f22e6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=43776 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1837 identity=43776 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b25b8e64ff datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1837 identity=43776 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b25b8e64ff datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1837 identity=43776 ipv4=10.0.0.41 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.62 25676ffa-4384-4b58-8a44-89aed112a9ba default }" containerID=d5a6d158342e9e53d71285b67ed4d99bf0758d5bba27293473c492419ae165c0 datapathConfiguration="&{false false false false false }" interface=lxc681c4355d7cc k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d5a6d15834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d5a6d15834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d5a6d15834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=4259 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d5a6d15834 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=264 identity=4259 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=d5a6d15834 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=264 identity=4259 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c subsys=endpoint level=info msg="Successful endpoint creation" containerID=d5a6d15834 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=264 identity=4259 ipv4=10.0.0.62 ipv6= k8sPodName=openstack/keystone-api-8446dfbf6b-nsz8c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.199 edc22e1a-92b8-4365-bf95-e7cc8974e0b4 default }" containerID=3b7fcad8055897f83adb1db6aa3901384a36d2b6cea21c0526c1c4587f73eea4 datapathConfiguration="&{false false false false false }" interface=lxc609a365e062f k8sPodName=openstack/keystone-credential-setup-c945s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b7fcad805 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b7fcad805 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b7fcad805 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=11580 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b7fcad805 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=44 identity=11580 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b7fcad805 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=44 identity=11580 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b7fcad805 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=44 identity=11580 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3b7fcad805 endpointID=44 k8sNamespace=openstack k8sPodName=keystone-credential-setup-c945s subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=30a6ff77-5b71-4c2f-8c98-cfd87a04bcf9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3b7fcad805 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=44 identity=11580 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/keystone-credential-setup-c945s subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.253 d8619aab-6ffc-48a8-b727-f2d7dc284da7 default }" containerID=d0d4cc2c7928ad14ef5b0615222eacc8d1680488867e25156719949cbe9fe86a datapathConfiguration="&{false false false false false }" interface=lxc542a3b847d58 k8sPodName=openstack/keystone-db-init-h29vk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d0d4cc2c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d0d4cc2c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d0d4cc2c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=42632 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d0d4cc2c79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=617 identity=42632 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d0d4cc2c79 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=617 identity=42632 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=endpoint level=info msg="Successful endpoint creation" containerID=d0d4cc2c79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=617 identity=42632 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=daemon level=info msg="Delete endpoint request" containerID=d0d4cc2c79 endpointID=617 k8sNamespace=openstack k8sPodName=keystone-db-init-h29vk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=1db9f6bc-67c5-4188-b941-fcfd71cf2eca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=d0d4cc2c79 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=617 identity=42632 ipv4=10.0.0.253 ipv6= k8sPodName=openstack/keystone-db-init-h29vk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.56 542afdfe-ff58-4e57-8d46-303a41e9af2a default }" containerID=3c612a81ecb019f1244fb7a5d602646f09716e7f93af12edad997a6b612f672b datapathConfiguration="&{false false false false false }" interface=lxc8a004cb03d08 k8sPodName=openstack/keystone-fernet-setup-g2zg5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3503 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3503 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3503 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3503 identity=20680 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3503 identity=20680 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c612a81ec datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3503 identity=20680 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c612a81ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3503 identity=20680 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c612a81ec endpointID=3503 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-g2zg5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=347b4290-baa6-4cb0-af69-f981afb21e63 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3c612a81ec datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3503 identity=20680 ipv4=10.0.0.56 ipv6= k8sPodName=openstack/keystone-fernet-setup-g2zg5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.222 54ba1e7f-3729-4f23-9db9-3846481588c2 default }" containerID=5ea99e3cb0e964bcb962faad2450e7d4a2012c809f5c7c0925216bae97ad753e datapathConfiguration="&{false false false false false }" interface=lxc67de1b29c446 k8sPodName=openstack/keystone-db-sync-qkw2f labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ea99e3cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ea99e3cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ea99e3cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=10260 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ea99e3cb0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2092 identity=10260 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=5ea99e3cb0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2092 identity=10260 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ea99e3cb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2092 identity=10260 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5ea99e3cb0 endpointID=2092 k8sNamespace=openstack k8sPodName=keystone-db-sync-qkw2f subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=2975c1d0-8b21-4b6c-ba1d-0ac584e8893d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5ea99e3cb0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2092 identity=10260 ipv4=10.0.0.222 ipv6= k8sPodName=openstack/keystone-db-sync-qkw2f subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 0e2ed60a-52b0-41d3-8a99-b1ac2e451103 default }" containerID=3da3345e77abefb617d8b08058dad4352dff9714489f91ec5b564dfb35683ab1 datapathConfiguration="&{false false false false false }" interface=lxce237c67676ff k8sPodName=openstack/keystone-rabbit-init-dkz7h labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3da3345e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3da3345e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3da3345e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=53628 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3da3345e77 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1203 identity=53628 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3da3345e77 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1203 identity=53628 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=endpoint level=info msg="Successful endpoint creation" containerID=3da3345e77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1203 identity=53628 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3da3345e77 endpointID=1203 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-dkz7h subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=b337ed6f-2003-4d21-bf8e-5851d8a5ed2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=3da3345e77 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1203 identity=53628 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/keystone-rabbit-init-dkz7h subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 17be7b9e-6e08-489f-be5d-4cab79c3afae default }" containerID=6cddd3aeb369e3019a8e619f560d77405404b77c0d1a5304f94c0a553fd5be79 datapathConfiguration="&{false false false false false }" interface=lxc4924b6a31fde k8sPodName=openstack/keystone-domain-manage-cktff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6cddd3aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6cddd3aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6cddd3aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=12698 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=6cddd3aeb3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=827 identity=12698 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6cddd3aeb3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=827 identity=12698 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=endpoint level=info msg="Successful endpoint creation" containerID=6cddd3aeb3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=827 identity=12698 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6cddd3aeb3 endpointID=827 k8sNamespace=openstack k8sPodName=keystone-domain-manage-cktff subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464 k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=7ae7ebe2-526c-4d5c-b98d-175ea06e4464 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=6cddd3aeb3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=827 identity=12698 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/keystone-domain-manage-cktff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 fc8aec30-1df7-4bfb-8770-117991494857 default }" containerID=96a424c4bdbfea5d9a072b814adce17f047fa0fba1794a30fb6225339d8e2687 datapathConfiguration="&{false false false false false }" interface=lxccd177e6eae8a k8sPodName=openstack/keystone-bootstrap-bc25j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 identity=34391 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3269 identity=34391 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=96a424c4bd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3269 identity=34391 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=endpoint level=info msg="Successful endpoint creation" containerID=96a424c4bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3269 identity=34391 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=96a424c4bd endpointID=3269 k8sNamespace=openstack k8sPodName=keystone-bootstrap-bc25j subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=4b661f3b-0c8e-4c89-8a3e-e1f59167e026 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=96a424c4bd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3269 identity=34391 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/keystone-bootstrap-bc25j subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.71 d225d16b-2efb-4b5c-85ec-9d1323bdd1e3 default }" containerID=552f0f11f636b66d0cde11abe17d0878ae497ddee4a1b691a316ce21b95e950a datapathConfiguration="&{false false false false false }" interface=lxcc8717e5584af k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=552f0f11f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=552f0f11f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=552f0f11f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=552f0f11f6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=157 identity=40901 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=552f0f11f6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=157 identity=40901 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=endpoint level=info msg="Successful endpoint creation" containerID=552f0f11f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=157 identity=40901 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=daemon level=info msg="Delete endpoint request" containerID=552f0f11f6 endpointID=157 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=552f0f11f6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=157 identity=40901 ipv4=10.0.0.71 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e5b59379-2743-42b4-b9c7-d1195dd1c9ef subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.226 4925d582-a429-43ed-bae9-ead21d32b801 default }" containerID=80dc9478fcd296e36baf5d411a5a6836a410b03ec9d67f6cfc1d404b8b87fbee datapathConfiguration="&{false false false false false }" interface=lxcbfc9f29acea4 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80dc9478fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80dc9478fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=80dc9478fc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=548 identity=19004 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80dc9478fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=19004 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80dc9478fc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=548 identity=19004 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=80dc9478fc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=548 identity=19004 ipv4=10.0.0.226 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 b05dfd3c-d38c-4803-8d93-597d01f45b3d default }" containerID=34f6238a54a10c229a42c1c31ebd02f2c68250d823b8209379c48574e23caa0e datapathConfiguration="&{false false false false false }" interface=lxc50b1185b91f8 k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=34f6238a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=34f6238a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=34f6238a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=11694 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=34f6238a54 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1347 identity=11694 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.33 f03930d0-342d-4975-b57a-7ce5a9bde6a5 default }" containerID=6eb4cb53f92247ea3f2b582f77f1f4f994b9a86357ee88517e09d00af1c83d5f datapathConfiguration="&{false false false false false }" interface=lxc0cbcfef4b1ec k8sPodName=openstack/barbican-db-init-ldgfx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6eb4cb53f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6eb4cb53f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6eb4cb53f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=10815 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6eb4cb53f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2303 identity=10815 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=34f6238a54 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1347 identity=11694 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh subsys=endpoint level=info msg="Successful endpoint creation" containerID=34f6238a54 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1347 identity=11694 ipv4=10.0.0.79 ipv6= k8sPodName=openstack/barbican-api-7f7cfb7dc6-2xqwh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6eb4cb53f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2303 identity=10815 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=endpoint level=info msg="Successful endpoint creation" containerID=6eb4cb53f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2303 identity=10815 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6eb4cb53f9 endpointID=2303 k8sNamespace=openstack k8sPodName=barbican-db-init-ldgfx subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=a835a4c4-81a9-4fc5-a901-bb22fe51af8d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6eb4cb53f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2303 identity=10815 ipv4=10.0.0.33 ipv6= k8sPodName=openstack/barbican-db-init-ldgfx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.18 fa510dcb-fe4d-4ed7-9bef-aea83cd4a892 default }" containerID=eca474d8c029d3a98416ed686cb71ec404f16bff97841f943e13bd958bd20ab1 datapathConfiguration="&{false false false false false }" interface=lxc77dc70492ea1 k8sPodName=openstack/barbican-db-sync-jq2bl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eca474d8c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eca474d8c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e349712-5829-4b19-be93-fbab6492393b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7e349712-5829-4b19-be93-fbab6492393b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=7e349712-5829-4b19-be93-fbab6492393b;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=7e349712-5829-4b19-be93-fbab6492393b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eca474d8c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=30323 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=7e349712-5829-4b19-be93-fbab6492393b,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=7e349712-5829-4b19-be93-fbab6492393b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eca474d8c0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=956 identity=30323 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eca474d8c0 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=956 identity=30323 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=endpoint level=info msg="Successful endpoint creation" containerID=eca474d8c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=956 identity=30323 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=eca474d8c0 endpointID=956 k8sNamespace=openstack k8sPodName=barbican-db-sync-jq2bl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=7e349712-5829-4b19-be93-fbab6492393b k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=7e349712-5829-4b19-be93-fbab6492393b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=eca474d8c0 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=956 identity=30323 ipv4=10.0.0.18 ipv6= k8sPodName=openstack/barbican-db-sync-jq2bl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.209 eea6a420-cec6-4ed8-ba2d-159fbf4342bc default }" containerID=b1b2245add4a7d1e8f95f798e3242ed50259d2638f97ffee19272c2314905220 datapathConfiguration="&{false false false false false }" interface=lxc7b55e6b260ba k8sPodName=openstack/barbican-rabbit-init-x6t2b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b1b2245add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b1b2245add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b1b2245add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=36810 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b1b2245add datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=842 identity=36810 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=b1b2245add datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=842 identity=36810 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b1b2245add datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=842 identity=36810 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b1b2245add endpointID=842 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-x6t2b subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=62fc1ecb-d59e-441e-94f1-d9547e59c8df k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=b1b2245add datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=842 identity=36810 ipv4=10.0.0.209 ipv6= k8sPodName=openstack/barbican-rabbit-init-x6t2b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.191 38ba18e6-511f-4bbd-a892-77af830dfd5f default }" containerID=0b20588724cad9d84df9686b0ee5571f68cecdff582f07dc84d941e27019d8fe datapathConfiguration="&{false false false false false }" interface=lxcb064ed871ce4 k8sPodName=openstack/barbican-ks-service-8xfw8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0b20588724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0b20588724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0b20588724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=28076 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=0b20588724 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=420 identity=28076 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0b20588724 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=420 identity=28076 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0b20588724 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=420 identity=28076 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0b20588724 endpointID=420 k8sNamespace=openstack k8sPodName=barbican-ks-service-8xfw8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861 k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=609c0106-7d4d-43e0-be5f-4a0015e02861 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=0b20588724 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=420 identity=28076 ipv4=10.0.0.191 ipv6= k8sPodName=openstack/barbican-ks-service-8xfw8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.212 59417854-e583-4437-8d54-c25d9cef3866 default }" containerID=bfbdad43506700cb7534d42334cc23fd4e496cbd9401a2788a88650316e1f366 datapathConfiguration="&{false false false false false }" interface=lxcc7241ba49300 k8sPodName=openstack/barbican-ks-endpoints-89884 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=38989 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2638 identity=38989 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bfbdad4350 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2638 identity=38989 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bfbdad4350 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2638 identity=38989 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=bfbdad4350 endpointID=2638 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-89884 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93 k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=d5de7423-c13e-45a4-b731-7554207c1b93 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=bfbdad4350 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2638 identity=38989 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/barbican-ks-endpoints-89884 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 022e5004-f7dd-4310-828f-7a455aca8de8 default }" containerID=3a30ce30732dfbd3a3f0fce698d10eaf8118d0a7c1366f798bfa8ca47560c554 datapathConfiguration="&{false false false false false }" interface=lxc0fe0b54a735c k8sPodName=openstack/barbican-ks-user-m787s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3a30ce3073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3a30ce3073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3a30ce3073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identity=44666 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3a30ce3073 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3649 identity=44666 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=3a30ce3073 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3649 identity=44666 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=endpoint level=info msg="Successful endpoint creation" containerID=3a30ce3073 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3649 identity=44666 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3a30ce3073 endpointID=3649 k8sNamespace=openstack k8sPodName=barbican-ks-user-m787s subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=5bd43871-b3d7-4810-965a-e90e27f1606b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=3a30ce3073 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3649 identity=44666 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/barbican-ks-user-m787s subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.8 2283381e-6184-4d57-b90d-93f1d4df79c8 default }" containerID=45fe59b0a4e23402ce699e694a887f71015c7b628c3ce831fcad787730f8f6dd datapathConfiguration="&{false false false false false }" interface=lxcae025fcce3e7 k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.10.10;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=39550 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.10.10,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=714 identity=39550 ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45fe59b0a4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=714 identity=39550 ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l subsys=endpoint level=info msg="Successful endpoint creation" containerID=45fe59b0a4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=714 identity=39550 ipv4=10.0.0.8 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-6988c5f444-nxh7l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.119 d962dafd-8376-43ef-9ac1-bcc4559e2eeb default }" containerID=b6587cefa35a4d6b88b4824bf8f4e3d811c4ad6fdd1198315567d5c512a5817a datapathConfiguration="&{false false false false false }" interface=lxcc9184ce16a00 k8sPodName=openstack/rook-ceph-detect-version-cgxv8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b6587cefa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b6587cefa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b6587cefa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=56923 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=b6587cefa3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2336 identity=56923 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b6587cefa3 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2336 identity=56923 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=b6587cefa3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2336 identity=56923 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03786167435443072 newInterval=11m15s subsys=map-ct level=info msg="Delete endpoint request" containerID=b6587cefa3 endpointID=2336 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-cgxv8 subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=7352d245-ec9b-460d-9478-dfb1d283cb8f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=b6587cefa3 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2336 identity=56923 ipv4=10.0.0.119 ipv6= k8sPodName=openstack/rook-ceph-detect-version-cgxv8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.105 e06a3d22-482a-4d7b-a81d-b3f8916b823a default }" containerID=591c38a1fe20cf94e10d54c8bf454393101e6f905d52c2fadcc4d2e739a3ee27 datapathConfiguration="&{false false false false false }" interface=lxc0cee7356511e k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=591c38a1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=591c38a1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=591c38a1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=40901 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=591c38a1fe datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1947 identity=40901 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=591c38a1fe datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1947 identity=40901 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=endpoint level=info msg="Successful endpoint creation" containerID=591c38a1fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1947 identity=40901 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=daemon level=info msg="Delete endpoint request" containerID=591c38a1fe endpointID=1947 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=591c38a1fe datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1947 identity=40901 ipv4=10.0.0.105 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-e07ad256-af96-4d89-ac50-2f0344894664 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 10291c91-e312-456b-9553-958f4b9cbac5 default }" containerID=2961e91cf75f1544e85644e4cb8d62af5c05a542795a7cabe84b482563e7aa74 datapathConfiguration="&{false false false false false }" interface=lxc6d800de7288d k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2961e91cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2961e91cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2961e91cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=12781 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2961e91cf7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=753 identity=12781 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2961e91cf7 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=753 identity=12781 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=2961e91cf7 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=753 identity=12781 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.91 1308a069-4111-48b1-b7b0-4fe26b1b0fad default }" containerID=485a025a3dc537356bcce16484644820b99ee5be2121112238cc93b0439d9ba5 datapathConfiguration="&{false false false false false }" interface=lxc586be513f49c k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.10.10;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=3116 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.10.10" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1444 identity=3116 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=485a025a3d datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1444 identity=3116 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=endpoint level=info msg="Successful endpoint creation" containerID=485a025a3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1444 identity=3116 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=485a025a3d endpointID=1444 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-gf8sb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=d206ee76-70a9-41b7-acaa-25bd0d71556c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.10.10]" subsys=allocator level=info msg="Removed endpoint" containerID=485a025a3d datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1444 identity=3116 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-gf8sb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.211 1e6d5227-11f2-4464-9cc4-333f1fcf4e4d default }" containerID=4d8479f680915b3a02b653914d88bb2590d069bec8f57710d6475bb66747fca0 datapathConfiguration="&{false false false false false }" interface=lxc4e4c665e2f6a k8sPodName=openstack/glance-db-init-l7hq8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4d8479f680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4d8479f680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4d8479f680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=1387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4d8479f680 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1342 identity=1387 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=4d8479f680 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1342 identity=1387 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=4d8479f680 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1342 identity=1387 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=4d8479f680 endpointID=1342 k8sNamespace=openstack k8sPodName=glance-db-init-l7hq8 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=419b4ce4-42f6-4c87-b91f-b7845abb91cb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=4d8479f680 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1342 identity=1387 ipv4=10.0.0.211 ipv6= k8sPodName=openstack/glance-db-init-l7hq8 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.200 da8821d8-f8a1-465b-9418-4053ebf192c7 default }" containerID=dc7201a8115fa51b8352951611daf5ddffa9617ebde3201c9cad00bfc75e9b37 datapathConfiguration="&{false false false false false }" interface=lxc947032062db7 k8sPodName=openstack/glance-db-sync-tkpqv labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=1028 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2297 identity=1028 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dc7201a811 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2297 identity=1028 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc7201a811 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=1028 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=dc7201a811 endpointID=2297 k8sNamespace=openstack k8sPodName=glance-db-sync-tkpqv subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2 k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=aaee9b37-a096-4978-8aac-ef8a41ae0ca2 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=dc7201a811 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2297 identity=1028 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/glance-db-sync-tkpqv subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.37 c9d116ff-2a19-4ab4-940a-aeac24a37f8a default }" containerID=8207ee89bc9453d249b3514bbc7c091d584221fcd06f19679cdb3967e41ad2d5 datapathConfiguration="&{false false false false false }" interface=lxc858e8317dc57 k8sPodName=openstack/glance-rabbit-init-7jvl2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac42cab3-224f-4956-bd42-54533612248f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ac42cab3-224f-4956-bd42-54533612248f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=ac42cab3-224f-4956-bd42-54533612248f;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=ac42cab3-224f-4956-bd42-54533612248f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identity=1325 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=ac42cab3-224f-4956-bd42-54533612248f,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=ac42cab3-224f-4956-bd42-54533612248f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3265 identity=1325 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8207ee89bc datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3265 identity=1325 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8207ee89bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3265 identity=1325 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=8207ee89bc endpointID=3265 k8sNamespace=openstack k8sPodName=glance-rabbit-init-7jvl2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=ac42cab3-224f-4956-bd42-54533612248f k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=ac42cab3-224f-4956-bd42-54533612248f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=8207ee89bc datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3265 identity=1325 ipv4=10.0.0.37 ipv6= k8sPodName=openstack/glance-rabbit-init-7jvl2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.220 b4dbe204-4d15-4a0d-a2b1-1733812a8cd6 default }" containerID=3c1a0e7b9b51d368fdfa3eead0422e0f8ce2dae8545723157bced138dddf96e1 datapathConfiguration="&{false false false false false }" interface=lxc959858e486e0 k8sPodName=openstack/glance-ks-service-skzfw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3c1a0e7b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3c1a0e7b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3c1a0e7b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=60689 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3c1a0e7b9b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2800 identity=60689 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3c1a0e7b9b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2800 identity=60689 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=endpoint level=info msg="Successful endpoint creation" containerID=3c1a0e7b9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2800 identity=60689 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3c1a0e7b9b endpointID=2800 k8sNamespace=openstack k8sPodName=glance-ks-service-skzfw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18 k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=9fba9c62-5d04-4057-b1ea-32c399989f18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3c1a0e7b9b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2800 identity=60689 ipv4=10.0.0.220 ipv6= k8sPodName=openstack/glance-ks-service-skzfw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.115 a473c055-9947-4ec3-9b8e-ca95f8aed55a default }" containerID=eedea5d251d5c24d214d76e472fbe2bb796d058a1a1e7d63eda731842453f7a2 datapathConfiguration="&{false false false false false }" interface=lxc2a39d9f0b26b k8sPodName=openstack/glance-ks-endpoints-kmg25 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eedea5d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eedea5d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6680845c-4822-4a82-9aae-592f47a38d86,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6680845c-4822-4a82-9aae-592f47a38d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6680845c-4822-4a82-9aae-592f47a38d86;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=6680845c-4822-4a82-9aae-592f47a38d86;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eedea5d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=43049 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6680845c-4822-4a82-9aae-592f47a38d86,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=6680845c-4822-4a82-9aae-592f47a38d86,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eedea5d251 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=234 identity=43049 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=eedea5d251 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=234 identity=43049 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=endpoint level=info msg="Successful endpoint creation" containerID=eedea5d251 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=234 identity=43049 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=daemon level=info msg="Delete endpoint request" containerID=eedea5d251 endpointID=234 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-kmg25 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6680845c-4822-4a82-9aae-592f47a38d86 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=6680845c-4822-4a82-9aae-592f47a38d86 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=eedea5d251 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=234 identity=43049 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/glance-ks-endpoints-kmg25 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 a0d61074-7d6b-4d65-aa57-4818e369a886 default }" containerID=e8624d1bd4cde7ff7375f86a0f6dbf2fe3a77516e4a9e8f27fe790102c7fa6ce datapathConfiguration="&{false false false false false }" interface=lxc937f7918286d k8sPodName=openstack/glance-ks-user-d94pw labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identity=59059 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1571 identity=59059 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e8624d1bd4 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1571 identity=59059 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=endpoint level=info msg="Successful endpoint creation" containerID=e8624d1bd4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1571 identity=59059 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.108 b1b7fab2-6196-40b6-86b2-c8c2d93a5745 default }" containerID=774ce5723faf711ffddbbb52a4a5244b2335d8bd3eb348bb65e6acbc55032175 datapathConfiguration="&{false false false false false }" interface=lxc39d80a3eec38 k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=774ce5723f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=774ce5723f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=774ce5723f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=4851 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=774ce5723f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3848 identity=4851 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.200 d9b45c68-2d4b-41e6-ae3c-0db13bc3bc2c default }" containerID=ffeb72684faf877d233ba6957b989ad348840e1d337b6553e374a2cd0fcb0641 datapathConfiguration="&{false false false false false }" interface=lxc81b700e60859 k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ffeb72684f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ffeb72684f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.1-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook-version=v1.10.10;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ffeb72684f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=15465 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.1-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook-version=v1.10.10,k8s:rook_cluster=openstack" ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ffeb72684f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=94 identity=15465 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=774ce5723f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3848 identity=4851 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc subsys=endpoint level=info msg="Successful endpoint creation" containerID=774ce5723f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3848 identity=4851 ipv4=10.0.0.108 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-67fd8975c6-zlbrc subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=ffeb72684f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=94 identity=15465 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w subsys=endpoint level=info msg="Successful endpoint creation" containerID=ffeb72684f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=94 identity=15465 ipv4=10.0.0.200 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-cb464b779-m2j5w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e8624d1bd4 endpointID=1571 k8sNamespace=openstack k8sPodName=glance-ks-user-d94pw subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9 k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=e6e2934e-3442-4ff9-a912-1ef5e71af5e9 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e8624d1bd4 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1571 identity=59059 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/glance-ks-user-d94pw subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.176 88d254fc-42fc-415f-afe1-bebde02ec248 default }" containerID=19e73e2842a56e0429c4c06a9e38deeaece02db9d19a7013f65aaa9f20b01ea3 datapathConfiguration="&{false false false false false }" interface=lxc3b51e20cabf3 k8sPodName=openstack/glance-metadefs-load-b42ch labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=19e73e2842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=19e73e2842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=19e73e2842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=52084 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=19e73e2842 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=694 identity=52084 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=19e73e2842 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=694 identity=52084 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=endpoint level=info msg="Successful endpoint creation" containerID=19e73e2842 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=694 identity=52084 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=19e73e2842 endpointID=694 k8sNamespace=openstack k8sPodName=glance-metadefs-load-b42ch subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=712cd757-3e1a-4dd7-9675-158c2cfa0e1e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=19e73e2842 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=694 identity=52084 ipv4=10.0.0.176 ipv6= k8sPodName=openstack/glance-metadefs-load-b42ch subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.160 151eab08-d9a7-4685-93fb-5d51aacc2b8c default }" containerID=fca4ee3ecd7845feb7a5a064e0095791b3da33f8127b97df00d05e100b3a8b89 datapathConfiguration="&{false false false false false }" interface=lxc60116d33956b k8sPodName=openstack/glance-storage-init-mgcjb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fca4ee3ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fca4ee3ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fca4ee3ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=31058 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fca4ee3ecd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1229 identity=31058 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=fca4ee3ecd datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1229 identity=31058 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=endpoint level=info msg="Successful endpoint creation" containerID=fca4ee3ecd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1229 identity=31058 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=fca4ee3ecd endpointID=1229 k8sNamespace=openstack k8sPodName=glance-storage-init-mgcjb subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=d6ebf76e-e112-425a-9aa1-7c8e822ea4b7 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=fca4ee3ecd datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1229 identity=31058 ipv4=10.0.0.160 ipv6= k8sPodName=openstack/glance-storage-init-mgcjb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.137 3dd14723-6c50-4a61-b60a-efb3dba7ea51 default }" containerID=dbef9b62df9d5c49907265504dfa04fc08ff81e5fe0cdbd6b284cb7728964f3b datapathConfiguration="&{false false false false false }" interface=lxc50c96bb746dd k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dbef9b62df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dbef9b62df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dbef9b62df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=65073 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=dbef9b62df datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=600 identity=65073 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=dbef9b62df datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=600 identity=65073 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=dbef9b62df datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=600 identity=65073 ipv4=10.0.0.137 ipv6= k8sPodName=openstack/glance-api-c84fb56f5-9k8k9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.139 3fa2083f-6d97-4c4b-9028-6029e7b89adf default }" containerID=85a231a2cfc99151e3c2467e33b0dbbaf025342e2e7daf10e34b039e74677563 datapathConfiguration="&{false false false false false }" interface=lxcbf04011cbf90 k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85a231a2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85a231a2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85a231a2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=18830 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=85a231a2cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=670 identity=18830 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 f76afb09-95a2-40fc-afc5-ea0b1d369965 default }" containerID=dc13c410dab1f4e52a06665222b81ff484d80ed64579cc603770739e9a1ba96e datapathConfiguration="&{false false false false false }" interface=lxc4846fdf672e8 k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=dc13c410da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=dc13c410da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=dc13c410da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=8898 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=dc13c410da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2095 identity=8898 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 ee0b04b0-8e69-4fd0-909d-25376014f701 default }" containerID=e93faf877966ee09baf52e8b8f7e639e959c7c53807a212db3c9d8b12721738a datapathConfiguration="&{false false false false false }" interface=lxc10a91f5a6a45 k8sPodName=openstack/staffeln-db-init-zkkkx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e93faf8779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e93faf8779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e93faf8779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=25569 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e93faf8779 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=117 identity=25569 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85a231a2cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=670 identity=18830 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk subsys=endpoint level=info msg="Successful endpoint creation" containerID=85a231a2cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=670 identity=18830 ipv4=10.0.0.139 ipv6= k8sPodName=openstack/staffeln-conductor-7448844584-kmzfk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=dc13c410da datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2095 identity=8898 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg subsys=endpoint level=info msg="Successful endpoint creation" containerID=dc13c410da datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2095 identity=8898 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-6b944c8b7-hm2jg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e93faf8779 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=117 identity=25569 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=endpoint level=info msg="Successful endpoint creation" containerID=e93faf8779 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=117 identity=25569 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e93faf8779 endpointID=117 k8sNamespace=openstack k8sPodName=staffeln-db-init-zkkkx subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=346452e2-8dd6-4da9-809e-fe57c6b43223 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=e93faf8779 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=117 identity=25569 ipv4=10.0.0.127 ipv6= k8sPodName=openstack/staffeln-db-init-zkkkx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 f4e6c1cc-7eb9-435b-b1e2-09731c1bf6cc default }" containerID=ed46cfb0f965a1f89e6b4d60ec375f5711e32d8e80e37923629b225615ee2f81 datapathConfiguration="&{false false false false false }" interface=lxcffe19d881cf9 k8sPodName=openstack/staffeln-db-sync-8fw6k labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ed46cfb0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ed46cfb0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e012882b-96ef-46a8-b79e-96746439574d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e012882b-96ef-46a8-b79e-96746439574d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=e012882b-96ef-46a8-b79e-96746439574d;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=e012882b-96ef-46a8-b79e-96746439574d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ed46cfb0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=4603 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=e012882b-96ef-46a8-b79e-96746439574d,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=e012882b-96ef-46a8-b79e-96746439574d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ed46cfb0f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=4603 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ed46cfb0f9 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2008 identity=4603 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k subsys=endpoint level=info msg="Successful endpoint creation" containerID=ed46cfb0f9 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2008 identity=4603 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/staffeln-db-sync-8fw6k subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager