level=info msg="Memory available for map entries (0.003% of 16764956672B): 41912391B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 73530" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 147061" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 73530" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration="781.406µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="44.451µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration="854.578µs" function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="4.59µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=91.622794ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="11.97µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="14.15µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="99.663µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="99.042µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="66.982µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="477.11µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.42µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.37789ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=6.514856ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="30.9µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="38.461µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="262.925µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="92.822µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="58.141µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=35.991246ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="66.051µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.14µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="3.04µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.23.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=102.738727ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="4.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.179064ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="2.74µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=200.578462ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="4.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="5.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="2.28µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="1.9µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.03µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="46.071µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="45.251µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="29.321µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="334.568µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="6.8µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="11.14µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="236.754µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="367.717µs" function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.204906ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="4.04µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="24.34µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.23 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.23 ipAddr.ipv6="" k8sNodeIP=199.204.45.23 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.23" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.142" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.23" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.23} {CiliumInternalIP 10.0.0.142}] 10.0.0.0/24 [] [] 10.0.0.185 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:44893" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.616359887s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Start hook executed" duration="24.891µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Start hook executed" duration="7.76µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="41.181µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="5.4µs" function="*job.group.Start" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=571 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.601899234s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=282.629633ms file-path=/var/run/cilium/state/templates/e4e433d6fd720bcbbb7fc938c07d9f22c44c4317f41b7ce25e305e41015ad7e4/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=571 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.138 1961db0a-7765-4300-ad36-b763ba4f14a3 default }" containerID=90bb5b36d563a0031665ddee2d1b2cf14bcb02ebf81e57de3726250a516d0548 datapathConfiguration="&{false false false false false }" interface=lxc3e42a2a490c3 k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c labels="[]" subsys=daemon sync-build=true level=info msg="Create endpoint request" addressing="&{10.0.0.28 ad1014e3-29c3-4845-8308-e99362f2b4a5 default }" containerID=da7b64d775817605679a103799a42cc2410831c23f8139e490a941c6518a62bf datapathConfiguration="&{false false false false false }" interface=lxcf96de448862f k8sPodName=kube-system/coredns-7c96b6546b-5k6fz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90bb5b36d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=endpoint level=info msg="New endpoint" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90bb5b36d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Resolving identity labels (blocking)" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90bb5b36d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=61961 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=90bb5b36d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=918 identity=61961 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Invalid state transition skipped" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=1453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=311 identity=1453 ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identityLabels="reserved:health" ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2380 identity=4 identityLabels="reserved:health" ipv4=10.0.0.185 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Compiled new BPF template" BPFCompilationTime=1.056630114s file-path=/var/run/cilium/state/templates/0803f5623082da533fcd3f2da0fcabda227d9fee5b1d163815bd86a3aa266914/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=90bb5b36d5 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=918 identity=61961 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=endpoint level=info msg="Successful endpoint creation" containerID=90bb5b36d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=918 identity=61961 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=da7b64d775 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=311 identity=1453 ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=endpoint level=info msg="Successful endpoint creation" containerID=da7b64d775 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=311 identity=1453 ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2380 identity=4 ipv4=10.0.0.185 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=90bb5b36d5 endpointID=918 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-c8x4c subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=a3f1eb72-eb30-44ae-98ca-6651a3b8f645 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=90bb5b36d5 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=918 identity=61961 ipv4=10.0.0.138 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-c8x4c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.195 3cad338e-8c40-4406-89e7-540c5e35e512 default }" containerID=db8ce4eac1bc282341264bbf114c6c6a855e2f67dbfc1c73beffd75c80f10a93 datapathConfiguration="&{false false false false false }" interface=lxca04d43ccc570 k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=db8ce4eac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=db8ce4eac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=db8ce4eac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=16809 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=db8ce4eac1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=376 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=db8ce4eac1 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=376 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 subsys=endpoint level=info msg="Successful endpoint creation" containerID=db8ce4eac1 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=376 identity=16809 ipv4=10.0.0.195 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-wt579 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=571 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00571 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00571 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00571 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00571:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00003 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00003 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00003:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=571 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.60 aa4ee6aa-79dc-4fef-b38d-e2b4435b52da default }" containerID=b8c71793f2bd4948b09094a87c347c0146613448124cbb0ad3525a333841cc91 datapathConfiguration="&{false false false false false }" interface=lxcec3080409af2 k8sPodName=kube-system/coredns-67659f764b-4nf5j labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8c71793f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8c71793f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b8c71793f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=1453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8c71793f2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1599 identity=1453 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8c71793f2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1599 identity=1453 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8c71793f2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1599 identity=1453 ipv4=10.0.0.60 ipv6= k8sPodName=kube-system/coredns-67659f764b-4nf5j subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.158 3aa77a14-9520-4ed2-bc29-59b080819d59 default }" containerID=0c9d4e7a3781b2ea4b432679f2b90d860749d053b9f0f5f8e1dbb2b47e8634ab datapathConfiguration="&{false false false false false }" interface=lxc0e08cb15d8ae k8sPodName=kube-system/coredns-67659f764b-srz8g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0c9d4e7a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0c9d4e7a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g subsys=endpoint level=info msg="Identity of endpoint changed" containerID=0c9d4e7a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=1453 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0c9d4e7a37 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=594 identity=1453 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0c9d4e7a37 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=594 identity=1453 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g subsys=endpoint level=info msg="Successful endpoint creation" containerID=0c9d4e7a37 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=594 identity=1453 ipv4=10.0.0.158 ipv6= k8sPodName=kube-system/coredns-67659f764b-srz8g subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.139 98127709-d357-48f2-bd4c-64c8d1045b60 default }" containerID=c422dfc3edfacd7c01a03f15cddaea2693a4d04dc0dac903320a512581ad0b1d datapathConfiguration="&{false false false false false }" interface=lxc7443f0cb3edf k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c422dfc3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c422dfc3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c422dfc3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=4791 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c422dfc3ed datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2271 identity=4791 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c422dfc3ed datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2271 identity=4791 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c422dfc3ed datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2271 identity=4791 ipv4=10.0.0.139 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wd9f4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=da7b64d775 endpointID=311 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-5k6fz subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=da7b64d775 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=311 identity=1453 ipv4=10.0.0.28 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-5k6fz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.80 a4cc7f5d-4491-48ac-80e4-7b051d156640 default }" containerID=0d35fe5fd8c57a45b635ac202118fa315b5394bad93eae721f31485c6111fea0 datapathConfiguration="&{false false false false false }" interface=lxc5296bbc39867 k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d35fe5fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d35fe5fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d35fe5fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=6102 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d35fe5fd8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=16 identity=6102 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0d35fe5fd8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=16 identity=6102 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d35fe5fd8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=16 identity=6102 ipv4=10.0.0.80 ipv6= k8sPodName=openstack/memcached-memcached-cf56b6468-fqmcg subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.6 c3eb2d60-4aae-4f2a-909e-be3d32bb15be default }" containerID=35868e046ceb367b196d28af358fc8e3e67b694f62495d4897c5f3c71d1bf43c datapathConfiguration="&{false false false false false }" interface=lxc3b721968216b k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=35868e046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=35868e046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=35868e046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=63698 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=35868e046c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1322 identity=63698 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.175 ed1cf689-2352-4ef5-ae6b-04aa29c76031 default }" containerID=e00b60b616c8acec8acb90261845dd736ee15ae07ee3fcee2dc4dbbe86a9a3cf datapathConfiguration="&{false false false false false }" interface=lxc5af138b41dde k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e00b60b616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e00b60b616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e00b60b616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=34525 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e00b60b616 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1986 identity=34525 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=35868e046c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1322 identity=63698 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=endpoint level=info msg="Successful endpoint creation" containerID=35868e046c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=63698 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.79 81331dcd-7834-44e7-bd17-6ee4f3f925de default }" containerID=9df62b88acacda2d70fa46b00d7a2792cfff766730b20bd54ba29e87720166f9 datapathConfiguration="&{false false false false false }" interface=lxc0e1c5073b029 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9df62b88ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9df62b88ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.231 31b64cc3-5d31-4634-aa16-a5e343d9af5d default }" containerID=e85cc3aa4020c60bb42fac7c3b90cf8331d06ba4e54f44c3bc576a51da7e8394 datapathConfiguration="&{false false false false false }" interface=lxc09f1aca4c8e3 k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e85cc3aa40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e85cc3aa40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e00b60b616 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1986 identity=34525 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e00b60b616 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1986 identity=34525 ipv4=10.0.0.175 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-28snb subsys=daemon level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=9df62b88ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=40909 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9df62b88ac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1166 identity=40909 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e85cc3aa40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=9957 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e85cc3aa40 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2161 identity=9957 ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9df62b88ac datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1166 identity=40909 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm subsys=endpoint level=info msg="Successful endpoint creation" containerID=9df62b88ac datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1166 identity=40909 ipv4=10.0.0.79 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-pgnxm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e85cc3aa40 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2161 identity=9957 ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e85cc3aa40 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2161 identity=9957 ipv4=10.0.0.231 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-b5rz8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.123 5c6a17b1-6db4-493e-aa97-83db426ec60c default }" containerID=494fb7433b57d3a73ec40502e8031c58aeafc874a8d95c423658d52dfe143c1b datapathConfiguration="&{false false false false false }" interface=lxc567d27c60831 k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=494fb7433b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=494fb7433b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=494fb7433b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=24702 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=494fb7433b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1119 identity=24702 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=494fb7433b datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1119 identity=24702 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=endpoint level=info msg="Successful endpoint creation" containerID=494fb7433b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1119 identity=24702 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=35868e046c endpointID=1322 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-hqrzd subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=c2192e15-03e0-42e0-807c-6f98bf20ad82 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=35868e046c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1322 identity=63698 ipv4=10.0.0.6 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-hqrzd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.109 0fb2b051-d624-4c14-a794-13e0dfce0db1 default }" containerID=f0013ecebfd4dad5f19450546f0ecfb52344d4bb3e70f203d7bc4f519e2ff36f datapathConfiguration="&{false false false false false }" interface=lxcf640907e1ce3 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f0013ecebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f0013ecebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f0013ecebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=18546 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f0013ecebf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=194 identity=18546 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=f0013ecebf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=194 identity=18546 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f0013ecebf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=194 identity=18546 ipv4=10.0.0.109 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-5fbf4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.126 1abfb18c-4274-4b58-bbaa-fd1e1e2d6b51 default }" containerID=c929e492382e3e7dd5c4dd559d670304db425a6d63d90be533b3a609f4e440a4 datapathConfiguration="&{false false false false false }" interface=lxcb9aee9826b7f k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c929e49238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c929e49238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aff5690c-c7e2-4d32-be04-808358410f93,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=aff5690c-c7e2-4d32-be04-808358410f93,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=aff5690c-c7e2-4d32-be04-808358410f93;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=aff5690c-c7e2-4d32-be04-808358410f93;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c929e49238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=14615 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=aff5690c-c7e2-4d32-be04-808358410f93,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=aff5690c-c7e2-4d32-be04-808358410f93,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c929e49238 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=14615 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c929e49238 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=254 identity=14615 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=endpoint level=info msg="Successful endpoint creation" containerID=c929e49238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=254 identity=14615 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c929e49238 endpointID=254 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-rbrgg subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=aff5690c-c7e2-4d32-be04-808358410f93 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=aff5690c-c7e2-4d32-be04-808358410f93 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=c929e49238 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=254 identity=14615 ipv4=10.0.0.126 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-rbrgg subsys=endpoint level=info msg="Delete endpoint request" containerID=494fb7433b endpointID=1119 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-4pjxg subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=91f3a71f-9849-474f-9cd5-6d0c9d1c50dd k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=494fb7433b datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1119 identity=24702 ipv4=10.0.0.123 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-4pjxg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.20 b558cd7c-02f8-43a7-b9f6-423c73ce3921 default }" containerID=bddf801649d6fa65b2a7558710404017b258f353efca7580419ca98c96659154 datapathConfiguration="&{false false false false false }" interface=lxc4510d09f2e1e k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=13139 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=904 identity=13139 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bddf801649 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=904 identity=13139 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bddf801649 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=904 identity=13139 ipv4=10.0.0.20 ipv6= k8sPodName=openstack/pxc-operator-69cb5bbdb9-86md4 subsys=daemon level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=67dd74f9-a923-46bf-aa91-452799fcb1d5] Description:}]" policyAddRequest=a9ed8a9d-b4e5-4169-994e-72980803129a subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=a9ed8a9d-b4e5-4169-994e-72980803129a policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=7c08a347-8626-40ed-8fc2-860594ba4528] Description:}]" policyAddRequest=77e6efe9-bc51-48f0-8a01-5367f894d8d9 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=77e6efe9-bc51-48f0-8a01-5367f894d8d9 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.115 45306226-b59c-4487-8a8f-e82d5b2c1a70 default }" containerID=11dee5f6e2d3cd587183b167b7bc57050a74b90b8cb17be9ba195b5f90944a08 datapathConfiguration="&{false false false false false }" interface=lxcbd7bc2fd0ef9 k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=11dee5f6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=11dee5f6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.16.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=11dee5f6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=39800 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.16.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=11dee5f6e2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=776 identity=39800 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=11dee5f6e2 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=776 identity=39800 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 subsys=endpoint level=info msg="Successful endpoint creation" containerID=11dee5f6e2 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=776 identity=39800 ipv4=10.0.0.115 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-54f767cff8-w9d69 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.39 b04906b7-4e4c-4fe9-b9f9-1de2cc43fa93 default }" containerID=85b0597aceefaf9d16f4fc0c584c9f566e6b851a634d55828aad1bb422d13627 datapathConfiguration="&{false false false false false }" interface=lxce4ac8cd38cb1 k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=85b0597ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=85b0597ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.17.4;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=85b0597ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=57793 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.17.4,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.4.34,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=85b0597ace datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1425 identity=57793 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=85b0597ace datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=1425 identity=57793 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk subsys=endpoint level=info msg="Successful endpoint creation" containerID=85b0597ace datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=1425 identity=57793 ipv4=10.0.0.39 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-6f465c979f-c67mk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.82 4eebf4e2-26f6-4ad2-826f-5d2c93921930 default }" containerID=1b141e9887147fa93ff55adcc54efd7b8645221fdd2636f1893eb3b3a3e0a816 datapathConfiguration="&{false false false false false }" interface=lxc2d4c902fa0a7 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=10401 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=888 identity=10401 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ffdc40ed-f7a0-48ef-84d2-707e6920dc89] Description:}]" policyAddRequest=338d32b0-2859-4281-914e-f4e70af062bc subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=338d32b0-2859-4281-914e-f4e70af062bc policyRevision=4 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Rewrote endpoint BPF program" containerID=1b141e9887 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=888 identity=10401 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1b141e9887 datapathPolicyRevision=4 desiredPolicyRevision=3 endpointID=888 identity=10401 ipv4=10.0.0.82 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.25 504dcf9d-e69c-4d76-bdb2-02e1f05dc319 default }" containerID=49783ea457250ad0c639bf9f44c15c7012986764b2e37777c07793d80c8093ed datapathConfiguration="&{false false false false false }" interface=lxcd237397c9162 k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=49783ea457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=49783ea457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=49783ea457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identity=27243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=49783ea457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1438 identity=27243 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=49783ea457 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1438 identity=27243 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=endpoint level=info msg="Successful endpoint creation" containerID=49783ea457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1438 identity=27243 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.171 75763910-12ac-4695-a9c0-6ff57c2fcb49 default }" containerID=055a2b30f9e74ca93e1b1681f205e8e94e79b0ccb95e77c2e4fb9bc397e04e52 datapathConfiguration="&{false false false false false }" interface=lxc8b5545114876 k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=055a2b30f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=055a2b30f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=endpoint level=info msg="Identity of endpoint changed" containerID=055a2b30f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=27243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=055a2b30f9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1782 identity=27243 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=055a2b30f9 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1782 identity=27243 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=055a2b30f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1782 identity=27243 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=055a2b30f9 endpointID=1782 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=055a2b30f9 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1782 identity=27243 ipv4=10.0.0.171 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-80afe962-289b-4f5f-8ed8-0b7d839b6a9c subsys=endpoint level=info msg="Delete endpoint request" containerID=49783ea457 endpointID=1438 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=49783ea457 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1438 identity=27243 ipv4=10.0.0.25 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c080ef4a-a830-4773-bb2c-b0ce9deb7626 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 df37a1aa-2968-41e7-bde8-5b40b804bf51 default }" containerID=7bf9c96235da2cb4c4f03fd38e78503ca01cce2d7bf70542439d3e42fe3e0551 datapathConfiguration="&{false false false false false }" interface=lxcec2c44ef912b k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7bf9c96235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7bf9c96235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7bf9c96235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=21113 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7bf9c96235 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=940 identity=21113 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7bf9c96235 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=940 identity=21113 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7bf9c96235 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=940 identity=21113 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.186 99c8206e-4709-44ee-9856-4c863eb96a2f default }" containerID=c690a41e87f46f81324c6d56a9f87215ca29f4e993489989cc5cd0db0ad89d42 datapathConfiguration="&{false false false false false }" interface=lxc1c0086cb0c94 k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c690a41e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c690a41e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c690a41e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=63310 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c690a41e87 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1431 identity=63310 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c690a41e87 datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=1431 identity=63310 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=c690a41e87 datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=1431 identity=63310 ipv4=10.0.0.186 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=c64093e9-6173-4171-881c-9ce0b8c34a12] Description:}]" policyAddRequest=1932d709-c86e-48d4-8cd9-48e5d028df28 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=1932d709-c86e-48d4-8cd9-48e5d028df28 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.137 570f9f3f-53cf-40e2-83c0-84720e18f363 default }" containerID=9c9ab8197731962be96be91b4609b78526e9d0471181f421be6c1cded8ab04fd datapathConfiguration="&{false false false false false }" interface=lxc3df2c71be2f4 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9c9ab81977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9c9ab81977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9c9ab81977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=46819 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9c9ab81977 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=254 identity=46819 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9c9ab81977 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=254 identity=46819 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9c9ab81977 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=254 identity=46819 ipv4=10.0.0.137 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.205 ed042814-db7e-465a-95f9-df3cc4d9c591 default }" containerID=7a1852f4350c1ee1d9f00e1fa32f1c53c096b4ec6834afa8136ccdd0015c541b datapathConfiguration="&{false false false false false }" interface=lxc9014d7e06152 k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7a1852f435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7a1852f435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7a1852f435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=27243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7a1852f435 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2400 identity=27243 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7a1852f435 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2400 identity=27243 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=7a1852f435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2400 identity=27243 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=7a1852f435 endpointID=2400 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=7a1852f435 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2400 identity=27243 ipv4=10.0.0.205 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-9a5d24f1-9522-46f2-94ad-150262d06ec2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.228 73c37794-c053-49ce-b7f5-5fb82ea9cf3d default }" containerID=90bf0faf31d91672c6f82e0529c20ebcde3363f0ff4b0f5f1ed1c6c7da5bdb8b datapathConfiguration="&{false false false false false }" interface=lxc2ea24cb786b6 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=90bf0faf31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=90bf0faf31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=90bf0faf31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=40014 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=90bf0faf31 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1256 identity=40014 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=90bf0faf31 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1256 identity=40014 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=90bf0faf31 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1256 identity=40014 ipv4=10.0.0.228 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.015027879776961784 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.182 e4e613a4-0c61-4a37-829f-bd6f41d3fdc1 default }" containerID=0322add6204893e98ea9c79b164c5d61bb81fca0303a0237bb2082fd94172935 datapathConfiguration="&{false false false false false }" interface=lxcf746e91d9286 k8sPodName=openstack/keystone-credential-setup-qttx2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0322add620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0322add620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0322add620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identity=2940 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0322add620 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2275 identity=2940 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0322add620 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2275 identity=2940 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0322add620 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2275 identity=2940 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0322add620 endpointID=2275 k8sNamespace=openstack k8sPodName=keystone-credential-setup-qttx2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18 k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=e50685bf-4d19-4458-8414-ddcd49088b18 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0322add620 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2275 identity=2940 ipv4=10.0.0.182 ipv6= k8sPodName=openstack/keystone-credential-setup-qttx2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.7 bb0cd7e7-3c3d-43aa-a4bc-ca02d604a0c3 default }" containerID=5816275043b29db8b87012d5e0b91263e9da217e320760b90994cc4232bc39e3 datapathConfiguration="&{false false false false false }" interface=lxcc9a031fbd6e4 k8sPodName=openstack/keystone-db-init-nrhpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=5088 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=770 identity=5088 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5816275043 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=770 identity=5088 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5816275043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=5088 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=5816275043 endpointID=770 k8sNamespace=openstack k8sPodName=keystone-db-init-nrhpr subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=fdc2406b-dd92-4638-8f36-356e4feb1a65 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=5816275043 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=770 identity=5088 ipv4=10.0.0.7 ipv6= k8sPodName=openstack/keystone-db-init-nrhpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.51 cbba909d-31f8-47b5-af4f-a687f518c24c default }" containerID=451808bc7dfe6618f073a1b9a4caf8b78c768535e7d6b9cc8e2897eb0d68ea3d datapathConfiguration="&{false false false false false }" interface=lxcca53d0d79906 k8sPodName=openstack/keystone-fernet-setup-v4jhk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=451808bc7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=451808bc7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=451808bc7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=47608 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=451808bc7d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2363 identity=47608 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=451808bc7d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2363 identity=47608 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=endpoint level=info msg="Successful endpoint creation" containerID=451808bc7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=47608 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=451808bc7d endpointID=2363 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-v4jhk subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=f05d5e2c-f67f-4948-b1ab-59e22c562c3b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=451808bc7d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2363 identity=47608 ipv4=10.0.0.51 ipv6= k8sPodName=openstack/keystone-fernet-setup-v4jhk subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.229 a7218462-37bd-418e-91fd-3cf802d58b62 default }" containerID=9cc6f29ea600d78fee9514ddca6fff547e52b76e00037a9d5e7aa3cfd4d1ecfe datapathConfiguration="&{false false false false false }" interface=lxcc4334505f74d k8sPodName=openstack/keystone-db-sync-2dppd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9cc6f29ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9cc6f29ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9cc6f29ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=31800 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9cc6f29ea6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=276 identity=31800 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9cc6f29ea6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=276 identity=31800 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=endpoint level=info msg="Successful endpoint creation" containerID=9cc6f29ea6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=276 identity=31800 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9cc6f29ea6 endpointID=276 k8sNamespace=openstack k8sPodName=keystone-db-sync-2dppd subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=07846253-7dd9-4093-8dce-ffbe6a77f015 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9cc6f29ea6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=276 identity=31800 ipv4=10.0.0.229 ipv6= k8sPodName=openstack/keystone-db-sync-2dppd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.169 2997afec-b07d-4ef2-be30-eabf3a5a711d default }" containerID=e1b75cf1da6416ba7824af20d5334b51cbed29e1efac262207c513c738c629f9 datapathConfiguration="&{false false false false false }" interface=lxce7d60ebfb783 k8sPodName=openstack/keystone-rabbit-init-fsbbm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1b75cf1da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1b75cf1da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1b75cf1da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=18689 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1b75cf1da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2151 identity=18689 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e1b75cf1da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2151 identity=18689 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1b75cf1da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=18689 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=daemon level=info msg="Delete endpoint request" containerID=e1b75cf1da endpointID=2151 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-fsbbm subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=08b9748f-5c14-4e00-84bc-12fbdcf2e226 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e1b75cf1da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2151 identity=18689 ipv4=10.0.0.169 ipv6= k8sPodName=openstack/keystone-rabbit-init-fsbbm subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.124 644d42be-7f14-4d8c-9675-e160dec8e82e default }" containerID=e58be849a751b9f57fdb06ca772e12bf81917b4dd786b14f9f7058a1d0f06ad5 datapathConfiguration="&{false false false false false }" interface=lxc735492a673c8 k8sPodName=openstack/keystone-domain-manage-z5xr7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e58be849a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e58be849a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e58be849a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=12071 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e58be849a7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=720 identity=12071 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=e58be849a7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=720 identity=12071 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e58be849a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=12071 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 b73e3609-a70e-44c2-89d0-10f2b1b2ef9e default }" containerID=d9b5a595886b5339b0f44f7084c39c34f3a924a28fad2aff9f96363e33c93d65 datapathConfiguration="&{false false false false false }" interface=lxc50cef95014e0 k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d9b5a59588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d9b5a59588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=d9b5a59588 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2719 identity=27239 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=d9b5a59588 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2719 identity=27239 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d9b5a59588 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2719 identity=27239 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d9b5a59588 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2719 identity=27239 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/keystone-api-687df9dbdf-bqwm4 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e58be849a7 endpointID=720 k8sNamespace=openstack k8sPodName=keystone-domain-manage-z5xr7 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=37329985-f45b-4fc8-aad0-0729346dbfbe k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=e58be849a7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=720 identity=12071 ipv4=10.0.0.124 ipv6= k8sPodName=openstack/keystone-domain-manage-z5xr7 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.84 46bb0af6-c545-423f-b188-d49096a017cc default }" containerID=41cf928457ae387bb9a2d9191289ed0440aa6d561dd7afe5737a3be12b745057 datapathConfiguration="&{false false false false false }" interface=lxcd169c39b7d44 k8sPodName=openstack/keystone-bootstrap-mv7lx labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=9978 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3303 identity=9978 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=41cf928457 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3303 identity=9978 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=endpoint level=info msg="Successful endpoint creation" containerID=41cf928457 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3303 identity=9978 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=41cf928457 endpointID=3303 k8sNamespace=openstack k8sPodName=keystone-bootstrap-mv7lx subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=15f7b061-e031-46b8-ba29-d5de0f9fe34d k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=41cf928457 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3303 identity=9978 ipv4=10.0.0.84 ipv6= k8sPodName=openstack/keystone-bootstrap-mv7lx subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.61 259bdac3-6834-410e-9620-747bd0f8c7e5 default }" containerID=9014b4f5614084d773fe9a0cca9e21ad63915ef9919bc9fc04726103a6a2e30f datapathConfiguration="&{false false false false false }" interface=lxce6b6123ef85c k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9014b4f561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9014b4f561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9014b4f561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=23070 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9014b4f561 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=241 identity=23070 ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=9014b4f561 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=241 identity=23070 ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl subsys=endpoint level=info msg="Successful endpoint creation" containerID=9014b4f561 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=241 identity=23070 ipv4=10.0.0.61 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-4kxvl subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 290eb244-8ba7-4385-81cd-e75a5a3c3ea2 default }" containerID=3b5bee23479908bac0f2a1c55c782e6a98de5bdb4a2b02c152a08fdba6bcfdd1 datapathConfiguration="&{false false false false false }" interface=lxc148db2be642d k8sPodName=openstack/horizon-5b76c79d55-bfgmf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3b5bee2347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3b5bee2347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3b5bee2347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=2841 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3b5bee2347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3100 identity=2841 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.140 f7173826-62af-441b-b908-2b2778479a40 default }" containerID=b8389479d632c51ab32d9f01c870b06d4ea82e3c892d17ecd9908130e8bc6ee1 datapathConfiguration="&{false false false false false }" interface=lxca985acd6665e k8sPodName=openstack/horizon-db-init-wbmhb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b8389479d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b8389479d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618;k8s:batch.kubernetes.io/job-name=horizon-db-init;k8s:component=db-init;k8s:controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-init;k8s:release_group=horizon;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b8389479d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=16375 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618,k8s:batch.kubernetes.io/job-name=horizon-db-init,k8s:component=db-init,k8s:controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-init,k8s:release_group=horizon" ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b8389479d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2264 identity=16375 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3b5bee2347 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3100 identity=2841 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf subsys=endpoint level=info msg="Successful endpoint creation" containerID=3b5bee2347 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3100 identity=2841 ipv4=10.0.0.215 ipv6= k8sPodName=openstack/horizon-5b76c79d55-bfgmf subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.247 1550e65d-c396-44b5-9e9c-b81b2f1ff63c default }" containerID=3631fc5fc495baaea57f51b8bec61b9b3d8e53cb867cdccb9fc2f312a9b760ed datapathConfiguration="&{false false false false false }" interface=lxc051e4da669b5 k8sPodName=openstack/horizon-5b76c79d55-dz79t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3631fc5fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3631fc5fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t subsys=endpoint level=info msg="Identity of endpoint changed" containerID=3631fc5fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=2841 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3631fc5fc4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=905 identity=2841 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b8389479d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2264 identity=16375 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b8389479d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=16375 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.239 c6cdad00-1cd2-4c22-8f44-25decf7d00a3 default }" containerID=37aae5f3784f8eb97553459cbe92a498faa017f4cfecd5e4a9ace169499cd2f2 datapathConfiguration="&{false false false false false }" interface=lxca04d3796826e k8sPodName=openstack/horizon-5b76c79d55-tkx2l labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37aae5f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37aae5f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l subsys=endpoint level=info msg="Identity of endpoint changed" containerID=37aae5f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=2841 identityLabels="k8s:application=horizon,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=horizon" ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37aae5f378 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1134 identity=2841 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3631fc5fc4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=905 identity=2841 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t subsys=endpoint level=info msg="Successful endpoint creation" containerID=3631fc5fc4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=905 identity=2841 ipv4=10.0.0.247 ipv6= k8sPodName=openstack/horizon-5b76c79d55-dz79t subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=37aae5f378 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1134 identity=2841 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l subsys=endpoint level=info msg="Successful endpoint creation" containerID=37aae5f378 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1134 identity=2841 ipv4=10.0.0.239 ipv6= k8sPodName=openstack/horizon-5b76c79d55-tkx2l subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b8389479d6 endpointID=2264 k8sNamespace=openstack k8sPodName=horizon-db-init-wbmhb subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618 k8s:batch.kubernetes.io/job-name=horizon-db-init k8s:component=db-init k8s:controller-uid=0b1c0a30-78bc-4b86-835d-690db2830618 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-init k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=b8389479d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2264 identity=16375 ipv4=10.0.0.140 ipv6= k8sPodName=openstack/horizon-db-init-wbmhb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.116 d0d11c18-086b-48a9-804d-e2c32b497326 default }" containerID=ba4d5bcbf1d35d9214943c49e65d32f27e738f6552def31164ba566e1a4a7904 datapathConfiguration="&{false false false false false }" interface=lxcda7f412671f7 k8sPodName=openstack/horizon-db-sync-hf2lj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=horizon;k8s:batch.kubernetes.io/controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61;k8s:batch.kubernetes.io/job-name=horizon-db-sync;k8s:component=db-sync;k8s:controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=horizon-db-sync;k8s:release_group=horizon;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=24449 identityLabels="k8s:application=horizon,k8s:batch.kubernetes.io/controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61,k8s:batch.kubernetes.io/job-name=horizon-db-sync,k8s:component=db-sync,k8s:controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=horizon-db-sync,k8s:release_group=horizon" ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1777 identity=24449 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba4d5bcbf1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1777 identity=24449 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba4d5bcbf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=24449 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=ba4d5bcbf1 endpointID=1777 k8sNamespace=openstack k8sPodName=horizon-db-sync-hf2lj subsys=daemon level=info msg="Releasing key" key="[k8s:application=horizon k8s:batch.kubernetes.io/controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61 k8s:batch.kubernetes.io/job-name=horizon-db-sync k8s:component=db-sync k8s:controller-uid=27767dd2-3082-4f87-a34c-f84f1ee73a61 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=horizon-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=horizon-db-sync k8s:release_group=horizon]" subsys=allocator level=info msg="Removed endpoint" containerID=ba4d5bcbf1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1777 identity=24449 ipv4=10.0.0.116 ipv6= k8sPodName=openstack/horizon-db-sync-hf2lj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 7511f9d1-4d16-4e10-a6e4-49945c1a9930 default }" containerID=680596f2981882e49e8fa625e834d701c610020d02818937f3c945602917f3e2 datapathConfiguration="&{false false false false false }" interface=lxcb43d6525dc77 k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=680596f298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=680596f298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d4183d00-0620-4863-8204-26442aee9995,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d4183d00-0620-4863-8204-26442aee9995,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=d4183d00-0620-4863-8204-26442aee9995;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=d4183d00-0620-4863-8204-26442aee9995;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=680596f298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=34874 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=d4183d00-0620-4863-8204-26442aee9995,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=d4183d00-0620-4863-8204-26442aee9995,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=680596f298 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2616 identity=34874 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=680596f298 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2616 identity=34874 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=endpoint level=info msg="Successful endpoint creation" containerID=680596f298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=34874 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=680596f298 endpointID=2616 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-wwljc subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=d4183d00-0620-4863-8204-26442aee9995 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=d4183d00-0620-4863-8204-26442aee9995 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=680596f298 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2616 identity=34874 ipv4=10.0.0.120 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-wwljc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.72 71189c67-f4e9-4cc4-8859-0f54743a211b default }" containerID=eda0c582d50481ddec35f47bc9afcf631f6150be46bf5e4b884d8db796d5ad8c datapathConfiguration="&{false false false false false }" interface=lxc93faca4906a6 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.176 82673118-04c6-4ed2-ad3c-44f68ac8fd6d default }" containerID=c674fff13338f7e7377067b88a0f9c127fc5418154d677addb535eba51d82fbd datapathConfiguration="&{false false false false false }" interface=lxc24d795cfffe9 k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 e86544fc-b3a1-4fde-939a-db3d158497d0 default }" containerID=4dcbebcad28e2c26216e9429706667b4046a7688e5825a40102fb285a8e9089c datapathConfiguration="&{false false false false false }" interface=lxc1ceb664cfdf5 k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=25068 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3382 identity=25068 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=16275 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=933 identity=16275 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=3025 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=649 identity=3025 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=eda0c582d5 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3382 identity=25068 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm subsys=endpoint level=info msg="Successful endpoint creation" containerID=eda0c582d5 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3382 identity=25068 ipv4=10.0.0.72 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-q4qdm subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c674fff133 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=933 identity=16275 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz subsys=endpoint level=info msg="Successful endpoint creation" containerID=c674fff133 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=933 identity=16275 ipv4=10.0.0.176 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-xm4jz subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=4dcbebcad2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=649 identity=3025 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt subsys=endpoint level=info msg="Successful endpoint creation" containerID=4dcbebcad2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=649 identity=3025 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-d5bb5d7db-dbznt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.40 3753684d-cc0f-45a5-bc78-d79e2f90ec24 default }" containerID=0f17baa0a0c7ffbfe84af8f7ce0065e62a78938866eaaaa3d27d0171cb885328 datapathConfiguration="&{false false false false false }" interface=lxc70e4345b505f k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0f17baa0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0f17baa0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0f17baa0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=35751 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0f17baa0a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3956 identity=35751 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0f17baa0a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3956 identity=35751 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=endpoint level=info msg="Successful endpoint creation" containerID=0f17baa0a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=35751 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.172 a326421f-f462-44f4-b542-839a637f88de default }" containerID=477dde57d6cc267a3b2411d1241ae71ee753b0e8722924c2c4225038ec03bd1a datapathConfiguration="&{false false false false false }" interface=lxc3f7af677ae64 k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=477dde57d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=477dde57d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=477dde57d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=27243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=477dde57d6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=987 identity=27243 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=endpoint level=info msg="Delete endpoint request" containerID=0f17baa0a0 endpointID=3956 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-g474w subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=c2b8370d-5785-4855-a78f-2c746604f7e4 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=0f17baa0a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3956 identity=35751 ipv4=10.0.0.40 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-g474w subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=477dde57d6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=987 identity=27243 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=endpoint level=info msg="Successful endpoint creation" containerID=477dde57d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=27243 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.81 a9d623f2-917a-4f1f-ab4f-0692e1706c9a default }" containerID=979334cc07f2ef90013381e5d5a6adc2039d06863399cb87ae4189d4acc30594 datapathConfiguration="&{false false false false false }" interface=lxc114082135d07 k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=979334cc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=979334cc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=979334cc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=27243 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=979334cc07 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=152 identity=27243 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=979334cc07 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=152 identity=27243 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=979334cc07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=27243 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=daemon level=info msg="Delete endpoint request" containerID=979334cc07 endpointID=152 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=477dde57d6 endpointID=987 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=979334cc07 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=152 identity=27243 ipv4=10.0.0.81 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c5dd95ee-ed51-46b4-9c2c-301b4e1badb4 subsys=endpoint level=info msg="Removed endpoint" containerID=477dde57d6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=987 identity=27243 ipv4=10.0.0.172 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-a4909db6-53c8-447d-8140-66225f99140c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.207 8bd3ef3f-ca01-4406-9f42-16e635b00bf8 default }" containerID=991ab51ae796c015747387518c8c5a2d50755fe3c533654faa47dc55b0c10faf datapathConfiguration="&{false false false false false }" interface=lxcb26dfeb37b7f k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=991ab51ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=991ab51ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=991ab51ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=7965 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=991ab51ae7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=292 identity=7965 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=991ab51ae7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=292 identity=7965 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=991ab51ae7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=292 identity=7965 ipv4=10.0.0.207 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.17 ebc5eb1b-cc3c-476d-87b7-f2b7b6548e0d default }" containerID=ba83aa34750166cf63d2252a0f47f33b860d4cfc3d529d408f3ad5a85a0a4bb6 datapathConfiguration="&{false false false false false }" interface=lxc8d7fba2da38e k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ba83aa3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ba83aa3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ba83aa3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=13613 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ba83aa3475 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1380 identity=13613 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ba83aa3475 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1380 identity=13613 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ba83aa3475 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1380 identity=13613 ipv4=10.0.0.17 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager