level=info msg="Memory available for map entries (0.003% of 67421638656B): 168554096B" subsys=config level=info msg="option bpf-ct-global-tcp-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-ct-global-any-max set by dynamic sizing to 295708" subsys=config level=info msg="option bpf-nat-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-neigh-global-max set by dynamic sizing to 591417" subsys=config level=info msg="option bpf-sock-rev-map-max set by dynamic sizing to 295708" subsys=config level=info msg=" --agent-health-port='9879'" subsys=daemon level=info msg=" --agent-labels=''" subsys=daemon level=info msg=" --agent-liveness-update-interval='1s'" subsys=daemon level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=daemon level=info msg=" --allocator-list-timeout='3m0s'" subsys=daemon level=info msg=" --allow-icmp-frag-needed='true'" subsys=daemon level=info msg=" --allow-localhost='auto'" subsys=daemon level=info msg=" --annotate-k8s-node='false'" subsys=daemon level=info msg=" --api-rate-limit=''" subsys=daemon level=info msg=" --arping-refresh-period='30s'" subsys=daemon level=info msg=" --auto-create-cilium-node-resource='true'" subsys=daemon level=info msg=" --auto-direct-node-routes='false'" subsys=daemon level=info msg=" --bgp-announce-lb-ip='false'" subsys=daemon level=info msg=" --bgp-announce-pod-cidr='false'" subsys=daemon level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=daemon level=info msg=" --bpf-auth-map-max='524288'" subsys=daemon level=info msg=" --bpf-ct-global-any-max='262144'" subsys=daemon level=info msg=" --bpf-ct-global-tcp-max='524288'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-fin='10s'" subsys=daemon level=info msg=" --bpf-ct-timeout-regular-tcp-syn='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-any='1m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp='6h0m0s'" subsys=daemon level=info msg=" --bpf-ct-timeout-service-tcp-grace='1m0s'" subsys=daemon level=info msg=" --bpf-filter-priority='1'" subsys=daemon level=info msg=" --bpf-fragments-map-max='8192'" subsys=daemon level=info msg=" --bpf-lb-acceleration='disabled'" subsys=daemon level=info msg=" --bpf-lb-affinity-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-algorithm='random'" subsys=daemon level=info msg=" --bpf-lb-dev-ip-addr-inherit=''" subsys=daemon level=info msg=" --bpf-lb-dsr-dispatch='opt'" subsys=daemon level=info msg=" --bpf-lb-dsr-l4-xlate='frontend'" subsys=daemon level=info msg=" --bpf-lb-external-clusterip='false'" subsys=daemon level=info msg=" --bpf-lb-maglev-hash-seed='JLfvgnHc2kaSUFaI'" subsys=daemon level=info msg=" --bpf-lb-maglev-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-maglev-table-size='16381'" subsys=daemon level=info msg=" --bpf-lb-map-max='65536'" subsys=daemon level=info msg=" --bpf-lb-mode='snat'" subsys=daemon level=info msg=" --bpf-lb-rev-nat-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-rss-ipv4-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-rss-ipv6-src-cidr=''" subsys=daemon level=info msg=" --bpf-lb-service-backend-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-service-map-max='0'" subsys=daemon level=info msg=" --bpf-lb-sock='false'" subsys=daemon level=info msg=" --bpf-lb-sock-hostns-only='false'" subsys=daemon level=info msg=" --bpf-lb-source-range-map-max='0'" subsys=daemon level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=daemon level=info msg=" --bpf-map-event-buffers=''" subsys=daemon level=info msg=" --bpf-nat-global-max='524288'" subsys=daemon level=info msg=" --bpf-neigh-global-max='524288'" subsys=daemon level=info msg=" --bpf-policy-map-full-reconciliation-interval='15m0s'" subsys=daemon level=info msg=" --bpf-policy-map-max='16384'" subsys=daemon level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=daemon level=info msg=" --bpf-sock-rev-map-max='262144'" subsys=daemon level=info msg=" --bypass-ip-availability-upon-restore='false'" subsys=daemon level=info msg=" --certificates-directory='/var/run/cilium/certs'" subsys=daemon level=info msg=" --cflags=''" subsys=daemon level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=daemon level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --cluster-health-port='4240'" subsys=daemon level=info msg=" --cluster-id='0'" subsys=daemon level=info msg=" --cluster-name='default'" subsys=daemon level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=daemon level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=daemon level=info msg=" --clustermesh-config='/var/lib/cilium/clustermesh/'" subsys=daemon level=info msg=" --clustermesh-ip-identities-sync-timeout='1m0s'" subsys=daemon level=info msg=" --cmdref=''" subsys=daemon level=info msg=" --cni-chaining-mode='none'" subsys=daemon level=info msg=" --cni-chaining-target=''" subsys=daemon level=info msg=" --cni-exclusive='true'" subsys=daemon level=info msg=" --cni-external-routing='false'" subsys=daemon level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=daemon level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=daemon level=info msg=" --config=''" subsys=daemon level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=daemon level=info msg=" --config-sources='config-map:kube-system/cilium-config'" subsys=daemon level=info msg=" --conntrack-gc-interval='0s'" subsys=daemon level=info msg=" --conntrack-gc-max-interval='0s'" subsys=daemon level=info msg=" --crd-wait-timeout='5m0s'" subsys=daemon level=info msg=" --custom-cni-conf='false'" subsys=daemon level=info msg=" --datapath-mode='veth'" subsys=daemon level=info msg=" --debug='false'" subsys=daemon level=info msg=" --debug-verbose=''" subsys=daemon level=info msg=" --derive-masquerade-ip-addr-from-device=''" subsys=daemon level=info msg=" --devices=''" subsys=daemon level=info msg=" --direct-routing-device=''" subsys=daemon level=info msg=" --disable-cnp-status-updates='true'" subsys=daemon level=info msg=" --disable-endpoint-crd='false'" subsys=daemon level=info msg=" --disable-envoy-version-check='false'" subsys=daemon level=info msg=" --disable-iptables-feeder-rules=''" subsys=daemon level=info msg=" --dns-max-ips-per-restored-rule='1000'" subsys=daemon level=info msg=" --dns-policy-unload-on-shutdown='false'" subsys=daemon level=info msg=" --dnsproxy-concurrency-limit='0'" subsys=daemon level=info msg=" --dnsproxy-concurrency-processing-grace-period='0s'" subsys=daemon level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=daemon level=info msg=" --dnsproxy-lock-count='128'" subsys=daemon level=info msg=" --dnsproxy-lock-timeout='500ms'" subsys=daemon level=info msg=" --egress-gateway-policy-map-max='16384'" subsys=daemon level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=daemon level=info msg=" --egress-masquerade-interfaces=''" subsys=daemon level=info msg=" --egress-multi-home-ip-rule-compat='false'" subsys=daemon level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=daemon level=info msg=" --enable-bandwidth-manager='false'" subsys=daemon level=info msg=" --enable-bbr='false'" subsys=daemon level=info msg=" --enable-bgp-control-plane='false'" subsys=daemon level=info msg=" --enable-bpf-clock-probe='false'" subsys=daemon level=info msg=" --enable-bpf-masquerade='false'" subsys=daemon level=info msg=" --enable-bpf-tproxy='false'" subsys=daemon level=info msg=" --enable-cilium-api-server-access='*'" subsys=daemon level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=daemon level=info msg=" --enable-cilium-health-api-server-access='*'" subsys=daemon level=info msg=" --enable-custom-calls='false'" subsys=daemon level=info msg=" --enable-endpoint-health-checking='true'" subsys=daemon level=info msg=" --enable-endpoint-routes='false'" subsys=daemon level=info msg=" --enable-envoy-config='false'" subsys=daemon level=info msg=" --enable-external-ips='false'" subsys=daemon level=info msg=" --enable-health-check-nodeport='true'" subsys=daemon level=info msg=" --enable-health-checking='true'" subsys=daemon level=info msg=" --enable-high-scale-ipcache='false'" subsys=daemon level=info msg=" --enable-host-firewall='false'" subsys=daemon level=info msg=" --enable-host-legacy-routing='false'" subsys=daemon level=info msg=" --enable-host-port='false'" subsys=daemon level=info msg=" --enable-hubble='false'" subsys=daemon level=info msg=" --enable-hubble-recorder-api='true'" subsys=daemon level=info msg=" --enable-icmp-rules='true'" subsys=daemon level=info msg=" --enable-identity-mark='true'" subsys=daemon level=info msg=" --enable-ip-masq-agent='false'" subsys=daemon level=info msg=" --enable-ipsec='false'" subsys=daemon level=info msg=" --enable-ipsec-key-watcher='true'" subsys=daemon level=info msg=" --enable-ipv4='true'" subsys=daemon level=info msg=" --enable-ipv4-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=daemon level=info msg=" --enable-ipv4-fragment-tracking='true'" subsys=daemon level=info msg=" --enable-ipv4-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6='false'" subsys=daemon level=info msg=" --enable-ipv6-big-tcp='false'" subsys=daemon level=info msg=" --enable-ipv6-masquerade='true'" subsys=daemon level=info msg=" --enable-ipv6-ndp='false'" subsys=daemon level=info msg=" --enable-k8s='true'" subsys=daemon level=info msg=" --enable-k8s-api-discovery='false'" subsys=daemon level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=daemon level=info msg=" --enable-k8s-event-handover='false'" subsys=daemon level=info msg=" --enable-k8s-networkpolicy='true'" subsys=daemon level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=daemon level=info msg=" --enable-l2-announcements='false'" subsys=daemon level=info msg=" --enable-l2-neigh-discovery='true'" subsys=daemon level=info msg=" --enable-l2-pod-announcements='false'" subsys=daemon level=info msg=" --enable-l7-proxy='true'" subsys=daemon level=info msg=" --enable-local-node-route='true'" subsys=daemon level=info msg=" --enable-local-redirect-policy='false'" subsys=daemon level=info msg=" --enable-mke='false'" subsys=daemon level=info msg=" --enable-monitor='true'" subsys=daemon level=info msg=" --enable-nat46x64-gateway='false'" subsys=daemon level=info msg=" --enable-node-port='false'" subsys=daemon level=info msg=" --enable-pmtu-discovery='false'" subsys=daemon level=info msg=" --enable-policy='default'" subsys=daemon level=info msg=" --enable-recorder='false'" subsys=daemon level=info msg=" --enable-remote-node-identity='true'" subsys=daemon level=info msg=" --enable-runtime-device-detection='false'" subsys=daemon level=info msg=" --enable-sctp='false'" subsys=daemon level=info msg=" --enable-service-topology='false'" subsys=daemon level=info msg=" --enable-session-affinity='false'" subsys=daemon level=info msg=" --enable-srv6='false'" subsys=daemon level=info msg=" --enable-stale-cilium-endpoint-cleanup='true'" subsys=daemon level=info msg=" --enable-svc-source-range-check='true'" subsys=daemon level=info msg=" --enable-tracing='false'" subsys=daemon level=info msg=" --enable-unreachable-routes='false'" subsys=daemon level=info msg=" --enable-vtep='false'" subsys=daemon level=info msg=" --enable-well-known-identities='false'" subsys=daemon level=info msg=" --enable-wireguard='false'" subsys=daemon level=info msg=" --enable-wireguard-userspace-fallback='false'" subsys=daemon level=info msg=" --enable-xdp-prefilter='false'" subsys=daemon level=info msg=" --enable-xt-socket-fallback='true'" subsys=daemon level=info msg=" --encrypt-interface=''" subsys=daemon level=info msg=" --encrypt-node='false'" subsys=daemon level=info msg=" --endpoint-gc-interval='5m0s'" subsys=daemon level=info msg=" --endpoint-queue-size='25'" subsys=daemon level=info msg=" --endpoint-status=''" subsys=daemon level=info msg=" --envoy-config-timeout='2m0s'" subsys=daemon level=info msg=" --envoy-log=''" subsys=daemon level=info msg=" --exclude-local-address=''" subsys=daemon level=info msg=" --external-envoy-proxy='false'" subsys=daemon level=info msg=" --fixed-identity-mapping=''" subsys=daemon level=info msg=" --fqdn-regex-compile-lru-size='1024'" subsys=daemon level=info msg=" --gops-port='9890'" subsys=daemon level=info msg=" --http-403-msg=''" subsys=daemon level=info msg=" --http-idle-timeout='0'" subsys=daemon level=info msg=" --http-max-grpc-timeout='0'" subsys=daemon level=info msg=" --http-normalize-path='true'" subsys=daemon level=info msg=" --http-request-timeout='3600'" subsys=daemon level=info msg=" --http-retry-count='3'" subsys=daemon level=info msg=" --http-retry-timeout='0'" subsys=daemon level=info msg=" --hubble-disable-tls='false'" subsys=daemon level=info msg=" --hubble-event-buffer-capacity='4095'" subsys=daemon level=info msg=" --hubble-event-queue-size='0'" subsys=daemon level=info msg=" --hubble-export-file-compress='false'" subsys=daemon level=info msg=" --hubble-export-file-max-backups='5'" subsys=daemon level=info msg=" --hubble-export-file-max-size-mb='10'" subsys=daemon level=info msg=" --hubble-export-file-path=''" subsys=daemon level=info msg=" --hubble-listen-address=''" subsys=daemon level=info msg=" --hubble-metrics=''" subsys=daemon level=info msg=" --hubble-metrics-server=''" subsys=daemon level=info msg=" --hubble-monitor-events=''" subsys=daemon level=info msg=" --hubble-prefer-ipv6='false'" subsys=daemon level=info msg=" --hubble-recorder-sink-queue-size='1024'" subsys=daemon level=info msg=" --hubble-recorder-storage-path='/var/run/cilium/pcaps'" subsys=daemon level=info msg=" --hubble-skip-unknown-cgroup-ids='true'" subsys=daemon level=info msg=" --hubble-socket-path='/var/run/cilium/hubble.sock'" subsys=daemon level=info msg=" --hubble-tls-cert-file=''" subsys=daemon level=info msg=" --hubble-tls-client-ca-files=''" subsys=daemon level=info msg=" --hubble-tls-key-file=''" subsys=daemon level=info msg=" --identity-allocation-mode='crd'" subsys=daemon level=info msg=" --identity-change-grace-period='5s'" subsys=daemon level=info msg=" --identity-gc-interval='15m0s'" subsys=daemon level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=daemon level=info msg=" --identity-restore-grace-period='10m0s'" subsys=daemon level=info msg=" --install-egress-gateway-routes='false'" subsys=daemon level=info msg=" --install-iptables-rules='true'" subsys=daemon level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=daemon level=info msg=" --ip-allocation-timeout='2m0s'" subsys=daemon level=info msg=" --ip-masq-agent-config-path='/etc/config/ip-masq-agent'" subsys=daemon level=info msg=" --ipam='cluster-pool'" subsys=daemon level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=daemon level=info msg=" --ipam-multi-pool-pre-allocation='default=8'" subsys=daemon level=info msg=" --ipsec-key-file=''" subsys=daemon level=info msg=" --ipsec-key-rotation-duration='5m0s'" subsys=daemon level=info msg=" --iptables-lock-timeout='5s'" subsys=daemon level=info msg=" --iptables-random-fully='false'" subsys=daemon level=info msg=" --ipv4-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv4-node='auto'" subsys=daemon level=info msg=" --ipv4-pod-subnets=''" subsys=daemon level=info msg=" --ipv4-range='auto'" subsys=daemon level=info msg=" --ipv4-service-loopback-address='169.254.42.1'" subsys=daemon level=info msg=" --ipv4-service-range='auto'" subsys=daemon level=info msg=" --ipv6-cluster-alloc-cidr='f00d::/64'" subsys=daemon level=info msg=" --ipv6-mcast-device=''" subsys=daemon level=info msg=" --ipv6-native-routing-cidr=''" subsys=daemon level=info msg=" --ipv6-node='auto'" subsys=daemon level=info msg=" --ipv6-pod-subnets=''" subsys=daemon level=info msg=" --ipv6-range='auto'" subsys=daemon level=info msg=" --ipv6-service-range='auto'" subsys=daemon level=info msg=" --join-cluster='false'" subsys=daemon level=info msg=" --k8s-api-server=''" subsys=daemon level=info msg=" --k8s-client-burst='10'" subsys=daemon level=info msg=" --k8s-client-qps='5'" subsys=daemon level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=daemon level=info msg=" --k8s-kubeconfig-path=''" subsys=daemon level=info msg=" --k8s-namespace='kube-system'" subsys=daemon level=info msg=" --k8s-require-ipv4-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-require-ipv6-pod-cidr='false'" subsys=daemon level=info msg=" --k8s-service-cache-size='128'" subsys=daemon level=info msg=" --k8s-service-proxy-name=''" subsys=daemon level=info msg=" --k8s-sync-timeout='3m0s'" subsys=daemon level=info msg=" --k8s-watcher-endpoint-selector='metadata.name!=kube-scheduler,metadata.name!=kube-controller-manager,metadata.name!=etcd-operator,metadata.name!=gcp-controller-manager'" subsys=daemon level=info msg=" --keep-config='false'" subsys=daemon level=info msg=" --kube-proxy-replacement='disabled'" subsys=daemon level=info msg=" --kube-proxy-replacement-healthz-bind-address=''" subsys=daemon level=info msg=" --kvstore=''" subsys=daemon level=info msg=" --kvstore-connectivity-timeout='2m0s'" subsys=daemon level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=daemon level=info msg=" --kvstore-max-consecutive-quorum-errors='2'" subsys=daemon level=info msg=" --kvstore-opt=''" subsys=daemon level=info msg=" --kvstore-periodic-sync='5m0s'" subsys=daemon level=info msg=" --l2-announcements-lease-duration='15s'" subsys=daemon level=info msg=" --l2-announcements-renew-deadline='5s'" subsys=daemon level=info msg=" --l2-announcements-retry-period='2s'" subsys=daemon level=info msg=" --l2-pod-announcements-interface=''" subsys=daemon level=info msg=" --label-prefix-file=''" subsys=daemon level=info msg=" --labels=''" subsys=daemon level=info msg=" --lib-dir='/var/lib/cilium'" subsys=daemon level=info msg=" --local-max-addr-scope='252'" subsys=daemon level=info msg=" --local-router-ipv4=''" subsys=daemon level=info msg=" --local-router-ipv6=''" subsys=daemon level=info msg=" --log-driver=''" subsys=daemon level=info msg=" --log-opt=''" subsys=daemon level=info msg=" --log-system-load='false'" subsys=daemon level=info msg=" --max-controller-interval='0'" subsys=daemon level=info msg=" --mesh-auth-enabled='true'" subsys=daemon level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=daemon level=info msg=" --mesh-auth-mutual-listener-port='0'" subsys=daemon level=info msg=" --mesh-auth-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=daemon level=info msg=" --mesh-auth-signal-backoff-duration='1s'" subsys=daemon level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=daemon level=info msg=" --mesh-auth-spire-admin-socket=''" subsys=daemon level=info msg=" --metrics=''" subsys=daemon level=info msg=" --mke-cgroup-mount=''" subsys=daemon level=info msg=" --monitor-aggregation='medium'" subsys=daemon level=info msg=" --monitor-aggregation-flags='all'" subsys=daemon level=info msg=" --monitor-aggregation-interval='5s'" subsys=daemon level=info msg=" --monitor-queue-size='0'" subsys=daemon level=info msg=" --mtu='0'" subsys=daemon level=info msg=" --node-encryption-opt-out-labels='node-role.kubernetes.io/control-plane'" subsys=daemon level=info msg=" --node-port-acceleration='disabled'" subsys=daemon level=info msg=" --node-port-algorithm='random'" subsys=daemon level=info msg=" --node-port-bind-protection='true'" subsys=daemon level=info msg=" --node-port-mode='snat'" subsys=daemon level=info msg=" --node-port-range='30000,32767'" subsys=daemon level=info msg=" --nodes-gc-interval='5m0s'" subsys=daemon level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=daemon level=info msg=" --policy-audit-mode='false'" subsys=daemon level=info msg=" --policy-queue-size='100'" subsys=daemon level=info msg=" --policy-trigger-interval='1s'" subsys=daemon level=info msg=" --pprof='false'" subsys=daemon level=info msg=" --pprof-address='localhost'" subsys=daemon level=info msg=" --pprof-port='6060'" subsys=daemon level=info msg=" --preallocate-bpf-maps='false'" subsys=daemon level=info msg=" --prepend-iptables-chains='true'" subsys=daemon level=info msg=" --procfs='/host/proc'" subsys=daemon level=info msg=" --prometheus-serve-addr=':9962'" subsys=daemon level=info msg=" --proxy-connect-timeout='2'" subsys=daemon level=info msg=" --proxy-gid='1337'" subsys=daemon level=info msg=" --proxy-idle-timeout-seconds='60'" subsys=daemon level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=daemon level=info msg=" --proxy-max-requests-per-connection='0'" subsys=daemon level=info msg=" --proxy-prometheus-port='9964'" subsys=daemon level=info msg=" --read-cni-conf=''" subsys=daemon level=info msg=" --remove-cilium-node-taints='true'" subsys=daemon level=info msg=" --restore='true'" subsys=daemon level=info msg=" --route-metric='0'" subsys=daemon level=info msg=" --routing-mode='tunnel'" subsys=daemon level=info msg=" --set-cilium-is-up-condition='true'" subsys=daemon level=info msg=" --set-cilium-node-taints='true'" subsys=daemon level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=daemon level=info msg=" --single-cluster-route='false'" subsys=daemon level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=daemon level=info msg=" --socket-path='/var/run/cilium/cilium.sock'" subsys=daemon level=info msg=" --srv6-encap-mode='reduced'" subsys=daemon level=info msg=" --state-dir='/var/run/cilium'" subsys=daemon level=info msg=" --synchronize-k8s-nodes='true'" subsys=daemon level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=daemon level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=daemon level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=daemon level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=daemon level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=daemon level=info msg=" --tofqdns-min-ttl='0'" subsys=daemon level=info msg=" --tofqdns-pre-cache=''" subsys=daemon level=info msg=" --tofqdns-proxy-port='0'" subsys=daemon level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=daemon level=info msg=" --trace-payloadlen='128'" subsys=daemon level=info msg=" --trace-sock='true'" subsys=daemon level=info msg=" --tunnel=''" subsys=daemon level=info msg=" --tunnel-port='6082'" subsys=daemon level=info msg=" --tunnel-protocol='geneve'" subsys=daemon level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=daemon level=info msg=" --use-cilium-internal-ip-for-ipsec='false'" subsys=daemon level=info msg=" --version='false'" subsys=daemon level=info msg=" --vlan-bpf-bypass=''" subsys=daemon level=info msg=" --vtep-cidr=''" subsys=daemon level=info msg=" --vtep-endpoint=''" subsys=daemon level=info msg=" --vtep-mac=''" subsys=daemon level=info msg=" --vtep-mask=''" subsys=daemon level=info msg=" --wireguard-encapsulate='false'" subsys=daemon level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=daemon level=info msg=" _ _ _" subsys=daemon level=info msg=" ___|_| |_|_ _ _____" subsys=daemon level=info msg="| _| | | | | | |" subsys=daemon level=info msg="|___|_|_|_|___|_|_|_|" subsys=daemon level=info msg="Cilium 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=daemon level=info msg="clang (10.0.0) and kernel (5.15.0) versions: OK!" subsys=linux-datapath level=info msg="linking environment: OK!" subsys=linux-datapath level=info msg="Kernel config file not found: if the agent fails to start, check the system requirements at https://docs.cilium.io/en/stable/operations/system_requirements" subsys=probes level=info msg="Detected mounted BPF filesystem at /sys/fs/bpf" subsys=bpf level=info msg="Mounted cgroupv2 filesystem at /run/cilium/cgroupv2" subsys=cgroups level=info msg="Parsing base label prefixes from default label list" subsys=labels-filter level=info msg="Parsing additional label prefixes from user inputs: []" subsys=labels-filter level=info msg="Final label prefixes to be used for identity evaluation:" subsys=labels-filter level=info msg=" - reserved:.*" subsys=labels-filter level=info msg=" - :io\\.kubernetes\\.pod\\.namespace" subsys=labels-filter level=info msg=" - :io\\.cilium\\.k8s\\.namespace\\.labels" subsys=labels-filter level=info msg=" - :app\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:io\\.kubernetes" subsys=labels-filter level=info msg=" - !:kubernetes\\.io" subsys=labels-filter level=info msg=" - !:.*beta\\.kubernetes\\.io" subsys=labels-filter level=info msg=" - !:k8s\\.io" subsys=labels-filter level=info msg=" - !:pod-template-generation" subsys=labels-filter level=info msg=" - !:pod-template-hash" subsys=labels-filter level=info msg=" - !:controller-revision-hash" subsys=labels-filter level=info msg=" - !:annotation.*" subsys=labels-filter level=info msg=" - !:etcd_node" subsys=labels-filter level=info msg=Invoked duration=1.391684ms function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="67.272µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.416664ms function="metrics.NewRegistry (registry.go:65)" subsys=hive level=info msg=Invoked duration="14.84µs" function="metrics.glob..func1 (cell.go:12)" subsys=hive level=info msg="Spire Delegate API Client is disabled as no socket path is configured" subsys=spire-delegate level=info msg="Mutual authentication handler is disabled as no port is configured" subsys=auth level=info msg=Invoked duration=109.180099ms function="cmd.glob..func4 (daemon_main.go:1607)" subsys=hive level=info msg=Invoked duration="34.881µs" function="gc.registerSignalHandler (cell.go:47)" subsys=hive level=info msg=Invoked duration="18.371µs" function="utime.initUtimeSync (cell.go:29)" subsys=hive level=info msg=Invoked duration="82.142µs" function="agentliveness.newAgentLivenessUpdater (agent_liveness.go:43)" subsys=hive level=info msg=Invoked duration="87.382µs" function="l2responder.NewL2ResponderReconciler (l2responder.go:63)" subsys=hive level=info msg=Invoked duration="111.163µs" function="garp.newGARPProcessor (processor.go:27)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9890" subsys=gops level=info msg="Start hook executed" duration="451.561µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Start hook executed" duration="1.91µs" function="metrics.NewRegistry.func1 (registry.go:86)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Serving prometheus metrics on :9962" subsys=metrics level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=11.331469ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration=9.053816ms function="authmap.newAuthMap.func1 (cell.go:27)" subsys=hive level=info msg="Start hook executed" duration="35.971µs" function="configmap.newMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="34.191µs" function="signalmap.newMap.func1 (cell.go:44)" subsys=hive level=info msg="Start hook executed" duration="217.435µs" function="nodemap.newNodeMap.func1 (cell.go:23)" subsys=hive level=info msg="Start hook executed" duration="90.482µs" function="eventsmap.newEventsMap.func1 (cell.go:35)" subsys=hive level=info msg="Start hook executed" duration="75.911µs" function="*cni.cniConfigManager.Start" subsys=hive level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Wrote CNI configuration file to /host/etc/cni/net.d/05-cilium.conflist" subsys=cni-config level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Start hook executed" duration=47.008359ms function="datapath.newDatapath.func1 (cells.go:113)" subsys=hive level=info msg="Restored 0 node IDs from the BPF map" subsys=linux-datapath level=info msg="Start hook executed" duration="94.402µs" function="datapath.newDatapath.func2 (cells.go:126)" subsys=hive level=info msg="Start hook executed" duration="9.33µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Node].Start" subsys=hive level=info msg="Start hook executed" duration="4.29µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNode].Start" subsys=hive level=info msg="Using autogenerated IPv4 allocation range" subsys=node v4Prefix=10.74.0.0/16 level=info msg="no local ciliumnode found, will not restore cilium internal ips from k8s" subsys=daemon level=info msg="Start hook executed" duration=103.732189ms function="node.NewLocalNodeStore.func1 (local_node_store.go:76)" subsys=hive level=info msg="Start hook executed" duration="3.32µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration=100.618755ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="7.381µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Using discoveryv1.EndpointSlice" subsys=k8s level=info msg="Start hook executed" duration=100.952132ms function="*manager.diffStore[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="11.041µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Pod].Start" subsys=hive level=info msg="Start hook executed" duration="2.57µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Namespace].Start" subsys=hive level=info msg="Start hook executed" duration="4.93µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.19µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumClusterwideNetworkPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="2.75µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumCIDRGroup].Start" subsys=hive level=info msg="Start hook executed" duration="26.89µs" function="endpointmanager.newDefaultEndpointManager.func1 (cell.go:203)" subsys=hive level=info msg="Start hook executed" duration="17.21µs" function="cmd.newPolicyTrifecta.func1 (policy.go:135)" subsys=hive level=info msg="Start hook executed" duration="43.791µs" function="*manager.manager.Start" subsys=hive level=info msg="Serving cilium node monitor v1.2 API at unix:///var/run/cilium/monitor1_2.sock" subsys=monitor-agent level=info msg="Start hook executed" duration="421.12µs" function="agent.newMonitorAgent.func1 (cell.go:61)" subsys=hive level=info msg="Start hook executed" duration="3.59µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumL2AnnouncementPolicy].Start" subsys=hive level=info msg="Start hook executed" duration="10.53µs" function="*job.group.Start" subsys=hive level=info msg="Envoy: Starting xDS gRPC server listening on /var/run/cilium/envoy/sockets/xds.sock" subsys=envoy-manager level=info msg="Start hook executed" duration="309.507µs" function="proxy.newProxy.func1 (cell.go:55)" subsys=hive level=info msg="Start hook executed" duration=1.074706ms function="signal.provideSignalManager.func1 (cell.go:25)" subsys=hive level=info msg="Datapath signal listener running" subsys=signal level=info msg="Start hook executed" duration=1.211619ms function="auth.registerAuthManager.func1 (cell.go:109)" subsys=hive level=info msg="Start hook executed" duration="3.74µs" function="auth.registerGCJobs.func1 (cell.go:158)" subsys=hive level=info msg="Start hook executed" duration="14.651µs" function="*job.group.Start" subsys=hive level=warning msg="Deprecated value for --kube-proxy-replacement: disabled (use either \"true\", or \"false\")" subsys=daemon level=info msg="Auto-disabling \"enable-node-port\", \"enable-external-ips\", \"bpf-lb-sock\", \"enable-host-port\" features and falling back to \"enable-host-legacy-routing\"" subsys=daemon level=info msg="Inheriting MTU from external network interface" device=ens3 ipAddr=199.204.45.74 mtu=1500 subsys=mtu level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_ipcache, recreating and re-pinning map cilium_ipcache" file-path=/sys/fs/bpf/tc/globals/cilium_ipcache name=cilium_ipcache subsys=bpf level=info msg="Removed map pin at /sys/fs/bpf/tc/globals/cilium_tunnel_map, recreating and re-pinning map cilium_tunnel_map" file-path=/sys/fs/bpf/tc/globals/cilium_tunnel_map name=cilium_tunnel_map subsys=bpf level=info msg="Restored services from maps" failedServices=0 restoredServices=0 subsys=service level=info msg="Restored backends from maps" failedBackends=0 restoredBackends=0 skippedBackends=0 subsys=service level=info msg="Reading old endpoints..." subsys=daemon level=info msg="No old endpoints found." subsys=daemon level=info msg="Waiting until all Cilium CRDs are available" subsys=k8s level=info msg="All Cilium CRDs have been found and are available" subsys=k8s level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=warning msg="Unable to get node resource" error="ciliumnodes.cilium.io \"instance\" not found" subsys=nodediscovery level=info msg="Successfully created CiliumNode resource" subsys=nodediscovery level=warning msg="Unable to create CiliumNode resource, will retry" error="ciliumnodes.cilium.io \"instance\" already exists" subsys=nodediscovery level=info msg="Retrieved node information from cilium node" nodeName=instance subsys=k8s level=info msg="Received own node information from API server" ipAddr.ipv4=199.204.45.74 ipAddr.ipv6="" k8sNodeIP=199.204.45.74 labels="map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:]" nodeName=instance subsys=k8s v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="k8s mode: Allowing localhost to reach local endpoints" subsys=daemon level=info msg="Detected devices" devices="[]" subsys=linux-datapath level=info msg="Enabling k8s event listener" subsys=k8s-watcher level=info msg="Removing stale endpoint interfaces" subsys=daemon level=info msg="Waiting until local node addressing before starting watchers depending on it" subsys=k8s-watcher level=info msg="Skipping kvstore configuration" subsys=daemon level=info msg="Initializing node addressing" subsys=daemon level=info msg="Initializing cluster-pool IPAM" subsys=ipam v4Prefix=10.0.0.0/24 v6Prefix="" level=info msg="Restoring endpoints..." subsys=daemon level=info msg="Endpoints restored" failed=0 restored=0 subsys=daemon level=info msg="Addressing information:" subsys=daemon level=info msg=" Cluster-Name: default" subsys=daemon level=info msg=" Cluster-ID: 0" subsys=daemon level=info msg=" Local node-name: instance" subsys=daemon level=info msg=" Node-IPv6: " subsys=daemon level=info msg=" External-Node IPv4: 199.204.45.74" subsys=daemon level=info msg=" Internal-Node IPv4: 10.0.0.134" subsys=daemon level=info msg=" IPv4 allocation prefix: 10.0.0.0/24" subsys=daemon level=info msg=" Loopback IPv4: 169.254.42.1" subsys=daemon level=info msg=" Local IPv4 addresses:" subsys=daemon level=info msg=" - 199.204.45.74" subsys=daemon level=info msg=" - 172.17.0.100" subsys=daemon level=info msg=" - 10.96.240.200" subsys=daemon level=info msg="Node updated" clusterName=default nodeName=instance subsys=nodemanager level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Waiting until all pre-existing resources have been received" subsys=k8s-watcher level=info msg="Adding local node to cluster" node="{instance default [{InternalIP 199.204.45.74} {CiliumInternalIP 10.0.0.134}] 10.0.0.0/24 [] [] 10.0.0.142 0 local 0 map[beta.kubernetes.io/arch:amd64 beta.kubernetes.io/os:linux kubernetes.io/arch:amd64 kubernetes.io/hostname:instance kubernetes.io/os:linux node-role.kubernetes.io/control-plane: node.kubernetes.io/exclude-from-external-load-balancers:] map[] 1 }" subsys=nodediscovery level=info msg="Initializing identity allocator" subsys=identity-cache level=info msg="Allocating identities between range" cluster-id=0 max=65535 min=256 subsys=identity-cache level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_host.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.forwarding sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.accept_local sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.cilium_net.send_redirects sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.core.bpf_jit_enable sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.conf.all.rp_filter sysParamValue=0 level=info msg="Setting sysctl" subsys=sysctl sysParamName=net.ipv4.fib_multipath_use_neigh sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.unprivileged_bpf_disabled sysParamValue=1 level=info msg="Setting sysctl" subsys=sysctl sysParamName=kernel.timer_migration sysParamValue=0 level=info msg="Setting up BPF datapath" bpfClockSource=ktime bpfInsnSet="" subsys=datapath-loader level=info msg="Iptables rules installed" subsys=iptables level=info msg="Adding new proxy port rules for cilium-dns-egress:36791" id=cilium-dns-egress subsys=proxy level=info msg="Iptables proxy rules installed" subsys=iptables level=info msg="Start hook executed" duration=2.626540121s function="cmd.newDaemonPromise.func1 (daemon_main.go:1663)" subsys=hive level=info msg="Starting IP identity watcher" subsys=ipcache level=info msg="Start hook executed" duration="15.92µs" function="utime.initUtimeSync.func1 (cell.go:33)" subsys=hive level=info msg="Initializing daemon" subsys=daemon level=info msg="Validating configured node address ranges" subsys=daemon level=info msg="Starting connection tracking garbage collector" subsys=daemon level=info msg="Start hook executed" duration="5.83µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="57.482µs" function="l2respondermap.newMap.func1 (l2_responder_map4.go:44)" subsys=hive level=info msg="Start hook executed" duration="11.451µs" function="*job.group.Start" subsys=hive level=info msg="Initial scan of connection tracking completed" subsys=ct-gc level=info msg="Regenerating restored endpoints" numRestored=0 subsys=daemon level=info msg="Creating host endpoint" subsys=daemon level=info msg="Finished regenerating restored endpoints" regenerated=0 subsys=daemon total=0 level=info msg="Deleted orphan backends" orphanBackends=0 subsys=service level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=159 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,reserved:host" ipv4= ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="Launching Cilium health daemon" subsys=daemon level=info msg="Launching Cilium health endpoint" subsys=daemon level=info msg="Started healthz status API server" address="127.0.0.1:9879" subsys=daemon level=info msg="Processing queued endpoint deletion requests from /var/run/cilium/deleteQueue" subsys=daemon level=info msg="processing 0 queued deletion requests" subsys=daemon level=info msg="Initializing Cilium API" subsys=daemon level=info msg="Daemon initialization completed" bootstrapTime=3.584209434s subsys=daemon level=info msg="Hubble server is disabled" subsys=hubble level=info msg="Serving cilium API at unix:///var/run/cilium/cilium.sock" subsys=daemon level=info msg="Compiled new BPF template" BPFCompilationTime=300.300637ms file-path=/var/run/cilium/state/templates/33d278967bd3e072dbdf5193a83481db2f472e5e01ca112d3bb5a37f3730fff9/bpf_host.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=159 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.139 c47981a1-15e1-46f2-94e6-37a48258d246 default }" containerID=892bde4e20bbaf01ad589add795dc76863bacd5270d666658838445a51309f79 datapathConfiguration="&{false false false false false }" interface=lxc2885114e931f k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb741660-2079-447e-8054-d41363128391,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb741660-2079-447e-8054-d41363128391,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="Create endpoint request" addressing="&{10.0.0.85 f4feb351-1ac7-4ab4-8fb0-eda46d5d4190 default }" containerID=949e0da85a9050e68f6b76a6cdfb898b2728af57bb0da086a281fabfd2a20f9a datapathConfiguration="&{false false false false false }" interface=lxc3a63ee840de2 k8sPodName=kube-system/coredns-7c96b6546b-lfw2v labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v line=611 subsys=endpoint level=info msg="Invalid state transition skipped" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=certgen;k8s:batch.kubernetes.io/controller-uid=eb741660-2079-447e-8054-d41363128391;k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen;k8s:controller-uid=eb741660-2079-447e-8054-d41363128391;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;k8s:job-name=envoy-gateway-gateway-helm-certgen;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:kube-system]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=26541 identityLabels="k8s:app=certgen,k8s:batch.kubernetes.io/controller-uid=eb741660-2079-447e-8054-d41363128391,k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen,k8s:controller-uid=eb741660-2079-447e-8054-d41363128391,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen,k8s:io.kubernetes.pod.namespace=envoy-gateway-system,k8s:job-name=envoy-gateway-gateway-helm-certgen" ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2246 identity=26541 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=endpoint level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=coredns;k8s:io.kubernetes.pod.namespace=kube-system;k8s:k8s-app=kube-dns;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=31869 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=974 identity=31869 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=endpoint level=info msg="New endpoint" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 ipv4=10.0.0.142 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identityLabels="reserved:health" ipv4=10.0.0.142 ipv6= k8sPodName=/ subsys=endpoint level=info msg="Identity of endpoint changed" containerID= datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2317 identity=4 identityLabels="reserved:health" ipv4=10.0.0.142 ipv6= k8sPodName=/ oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Serving cilium health API at unix:///var/run/cilium/health.sock" subsys=health-server level=info msg="Compiled new BPF template" BPFCompilationTime=1.08152485s file-path=/var/run/cilium/state/templates/f150bcee93b900a5a4c00b29fab04b61ba8717dd660cd00baf00447ecc229d77/bpf_lxc.o subsys=datapath-loader level=info msg="Rewrote endpoint BPF program" containerID=949e0da85a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=974 identity=31869 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=endpoint level=info msg="Successful endpoint creation" containerID=949e0da85a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=974 identity=31869 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=892bde4e20 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2246 identity=26541 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=endpoint level=info msg="Successful endpoint creation" containerID=892bde4e20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2246 identity=26541 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2317 identity=4 ipv4=10.0.0.142 ipv6= k8sPodName=/ subsys=endpoint level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=892bde4e20 endpointID=2246 k8sNamespace=envoy-gateway-system k8sPodName=envoy-gateway-gateway-helm-certgen-x6f4x subsys=daemon level=info msg="Releasing key" key="[k8s:app=certgen k8s:batch.kubernetes.io/controller-uid=eb741660-2079-447e-8054-d41363128391 k8s:batch.kubernetes.io/job-name=envoy-gateway-gateway-helm-certgen k8s:controller-uid=eb741660-2079-447e-8054-d41363128391 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway-gateway-helm-certgen k8s:io.kubernetes.pod.namespace=envoy-gateway-system k8s:job-name=envoy-gateway-gateway-helm-certgen]" subsys=allocator level=info msg="Removed endpoint" containerID=892bde4e20 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2246 identity=26541 ipv4=10.0.0.139 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-gateway-helm-certgen-x6f4x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.153 c24414c7-7d66-472d-a073-6c93b1360cf2 default }" containerID=ce5d3d3cf8dc687ee14b22fdb72948da58ff10d47e2c396543ac355f66eb8dd6 datapathConfiguration="&{false false false false false }" interface=lxcc15a1c7a880d k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:envoy-gateway-system k8s:io.cilium.k8s.namespace.labels.name:envoy-gateway-system]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=envoy-gateway;k8s:app.kubernetes.io/name=gateway-helm;k8s:control-plane=envoy-gateway;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system;k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway;k8s:io.kubernetes.pod.namespace=envoy-gateway-system;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identity=21512 identityLabels="k8s:app.kubernetes.io/instance=envoy-gateway,k8s:app.kubernetes.io/name=gateway-helm,k8s:control-plane=envoy-gateway,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=envoy-gateway-system,k8s:io.cilium.k8s.namespace.labels.name=envoy-gateway-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=envoy-gateway,k8s:io.kubernetes.pod.namespace=envoy-gateway-system" ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3617 identity=21512 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ce5d3d3cf8 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3617 identity=21512 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g subsys=endpoint level=info msg="Successful endpoint creation" containerID=ce5d3d3cf8 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3617 identity=21512 ipv4=10.0.0.153 ipv6= k8sPodName=envoy-gateway-system/envoy-gateway-78446f96c9-gcc9g subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=159 identity=1 identityLabels="k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00159 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00159 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00159 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00159:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=159 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.194 2b0010de-2e42-4da5-a582-4d034b533cca default }" containerID=bdf650534703897486bf7ad50a3ef68295383b120e10bb1a1f685345eeddc75f datapathConfiguration="&{false false false false false }" interface=lxc893cf12107cf k8sPodName=kube-system/coredns-67659f764b-2rxv7 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=bdf6505347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=bdf6505347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=bdf6505347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=31869 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=bdf6505347 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=169 identity=31869 ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=bdf6505347 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=169 identity=31869 ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 subsys=endpoint level=info msg="Successful endpoint creation" containerID=bdf6505347 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=169 identity=31869 ipv4=10.0.0.194 ipv6= k8sPodName=kube-system/coredns-67659f764b-2rxv7 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.250 ee9204aa-03c0-44e5-908e-edc2aeeafd29 default }" containerID=f7dbb2d2c6f6a4cc4d8792db9cbe2f8ea2ab2af1595c5c78f2724cd0f748f42d datapathConfiguration="&{false false false false false }" interface=lxcdfbfa172f721 k8sPodName=kube-system/coredns-67659f764b-vgx6m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f7dbb2d2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f7dbb2d2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m subsys=endpoint level=info msg="Identity of endpoint changed" containerID=f7dbb2d2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=31869 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=coredns,k8s:io.kubernetes.pod.namespace=kube-system,k8s:k8s-app=kube-dns" ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f7dbb2d2c6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2959 identity=31869 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f7dbb2d2c6 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2959 identity=31869 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m subsys=endpoint level=info msg="Successful endpoint creation" containerID=f7dbb2d2c6 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2959 identity=31869 ipv4=10.0.0.250 ipv6= k8sPodName=kube-system/coredns-67659f764b-vgx6m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.254 b9af88cd-d0fb-4868-85ae-c31d77ceed3e default }" containerID=8c16e636c289e8828b157bd02fcdc1d476974a76daf31fc435dabff42ebd2895 datapathConfiguration="&{false false false false false }" interface=lxcf6741d366ad8 k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8c16e636c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8c16e636c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=local-path-provisioner;k8s:app.kubernetes.io/name=local-path-provisioner;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8c16e636c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=1026 identityLabels="k8s:app.kubernetes.io/instance=local-path-provisioner,k8s:app.kubernetes.io/name=local-path-provisioner,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=8c16e636c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1337 identity=1026 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8c16e636c2 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1337 identity=1026 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm subsys=endpoint level=info msg="Successful endpoint creation" containerID=8c16e636c2 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1337 identity=1026 ipv4=10.0.0.254 ipv6= k8sPodName=local-path-storage/local-path-provisioner-679c578f5-wrmwm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=949e0da85a endpointID=974 k8sNamespace=kube-system k8sPodName=coredns-7c96b6546b-lfw2v subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=coredns k8s:io.kubernetes.pod.namespace=kube-system k8s:k8s-app=kube-dns]" subsys=allocator level=info msg="Removed endpoint" containerID=949e0da85a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=974 identity=31869 ipv4=10.0.0.85 ipv6= k8sPodName=kube-system/coredns-7c96b6546b-lfw2v subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.127 c991bf51-6f26-47a7-a0f3-3899b5cdef67 default }" containerID=6e8f8e7960f52425b056537526517a1316fbcc1a067a8115cff202f7955b39d8 datapathConfiguration="&{false false false false false }" interface=lxc3f229336c4fc k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=cert-manager;k8s:app.kubernetes.io/component=controller;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cert-manager;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=17306 identityLabels="k8s:app.kubernetes.io/component=controller,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cert-manager,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cert-manager,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2216 identity=17306 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.183 31142d7a-c86d-4315-b09e-ba5ffcc4f24d default }" containerID=5ecd66cb5688f72836274436ade9f3e94820b09a60895a4a810419345026b0c2 datapathConfiguration="&{false false false false false }" interface=lxc6fb0bd197250 k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5ecd66cb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5ecd66cb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=webhook;k8s:app.kubernetes.io/component=webhook;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=webhook;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5ecd66cb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=1328 identityLabels="k8s:app.kubernetes.io/component=webhook,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=webhook,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=webhook,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-webhook,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5ecd66cb56 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1533 identity=1328 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.173 7090751d-cacf-44be-baed-ea0a116ac364 default }" containerID=fb7902440f047044a302ba9035b889b5097e3c4a09649772458cea02c09ecab7 datapathConfiguration="&{false false false false false }" interface=lxc55745d486450 k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=fb7902440f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=fb7902440f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=cainjector;k8s:app.kubernetes.io/component=cainjector;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=cainjector;k8s:app.kubernetes.io/version=v1.11.5;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector;k8s:io.kubernetes.pod.namespace=cert-manager;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=fb7902440f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=13346 identityLabels="k8s:app.kubernetes.io/component=cainjector,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=cainjector,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=cainjector,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-cainjector,k8s:io.kubernetes.pod.namespace=cert-manager" ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=fb7902440f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3349 identity=13346 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5ecd66cb56 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=1533 identity=1328 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr subsys=endpoint level=info msg="Successful endpoint creation" containerID=5ecd66cb56 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=1533 identity=1328 ipv4=10.0.0.183 ipv6= k8sPodName=cert-manager/cert-manager-webhook-548949fc64-slbpr subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6e8f8e7960 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2216 identity=17306 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r subsys=endpoint level=info msg="Successful endpoint creation" containerID=6e8f8e7960 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2216 identity=17306 ipv4=10.0.0.127 ipv6= k8sPodName=cert-manager/cert-manager-75c4c745bc-gk78r subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=fb7902440f datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=3349 identity=13346 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq subsys=endpoint level=info msg="Successful endpoint creation" containerID=fb7902440f datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=3349 identity=13346 ipv4=10.0.0.173 ipv6= k8sPodName=cert-manager/cert-manager-cainjector-64b59ddb75-s7fhq subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.82 8c96da30-49d1-447d-b2a9-07071fb0e432 default }" containerID=69e3ae1e46951d99b2b61ee24ba998ec4dc3b1718c3423445d8ff25f18027550 datapathConfiguration="&{false false false false false }" interface=lxc5d598c290bc4 k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=69e3ae1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=69e3ae1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:cert-manager k8s:io.cilium.k8s.namespace.labels.name:cert-manager]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=startupapicheck;k8s:app.kubernetes.io/component=startupapicheck;k8s:app.kubernetes.io/instance=cert-manager;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=startupapicheck;k8s:app.kubernetes.io/version=v1.11.5;k8s:batch.kubernetes.io/controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f;k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck;k8s:controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f;k8s:helm.sh/chart=cert-manager-v1.11.5;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager;k8s:io.cilium.k8s.namespace.labels.name=cert-manager;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck;k8s:io.kubernetes.pod.namespace=cert-manager;k8s:job-name=cert-manager-startupapicheck;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=69e3ae1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=54860 identityLabels="k8s:app.kubernetes.io/component=startupapicheck,k8s:app.kubernetes.io/instance=cert-manager,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=startupapicheck,k8s:app.kubernetes.io/version=v1.11.5,k8s:app=startupapicheck,k8s:batch.kubernetes.io/controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f,k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck,k8s:controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f,k8s:helm.sh/chart=cert-manager-v1.11.5,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager,k8s:io.cilium.k8s.namespace.labels.name=cert-manager,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck,k8s:io.kubernetes.pod.namespace=cert-manager,k8s:job-name=cert-manager-startupapicheck" ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=69e3ae1e46 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2484 identity=54860 ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=69e3ae1e46 datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2484 identity=54860 ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=endpoint level=info msg="Successful endpoint creation" containerID=69e3ae1e46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2484 identity=54860 ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=69e3ae1e46 endpointID=2484 k8sNamespace=cert-manager k8sPodName=cert-manager-startupapicheck-rq6bt subsys=daemon level=info msg="Releasing key" key="[k8s:app=startupapicheck k8s:app.kubernetes.io/component=startupapicheck k8s:app.kubernetes.io/instance=cert-manager k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=startupapicheck k8s:app.kubernetes.io/version=v1.11.5 k8s:batch.kubernetes.io/controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f k8s:batch.kubernetes.io/job-name=cert-manager-startupapicheck k8s:controller-uid=d0432f30-becb-44a6-9f4d-98546f7c406f k8s:helm.sh/chart=cert-manager-v1.11.5 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=cert-manager k8s:io.cilium.k8s.namespace.labels.name=cert-manager k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=cert-manager-startupapicheck k8s:io.kubernetes.pod.namespace=cert-manager k8s:job-name=cert-manager-startupapicheck]" subsys=allocator level=info msg="Removed endpoint" containerID=69e3ae1e46 datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2484 identity=54860 ipv4=10.0.0.82 ipv6= k8sPodName=cert-manager/cert-manager-startupapicheck-rq6bt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.66 b7a9a573-1bcd-4f5a-bc9b-7de4493c0856 default }" containerID=2c3074968c994d363fdcb132e9ed89cc3d79aeca3ee3f604cdf79ff2632403f0 datapathConfiguration="&{false false false false false }" interface=lxc4076d4639766 k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2c3074968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2c3074968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create;k8s:controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-create;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2c3074968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=28267 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create,k8s:controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-create" ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=2c3074968c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=431 identity=28267 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=2c3074968c datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=431 identity=28267 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=endpoint level=info msg="Successful endpoint creation" containerID=2c3074968c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=431 identity=28267 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=daemon level=info msg="Delete endpoint request" containerID=2c3074968c endpointID=431 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-create-w2nns subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956 k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-create k8s:controller-uid=8b776664-3936-4cc0-a4ed-4ff5f3324956 k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-create]" subsys=allocator level=info msg="Removed endpoint" containerID=2c3074968c datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=431 identity=28267 ipv4=10.0.0.66 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-create-w2nns subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.224 1b5814aa-d29b-4e1b-b32a-d299e34eb866 default }" containerID=80016f7b9a800f35180fbf1c8a42e8564439ed7de9b8e8465a82448a971284d2 datapathConfiguration="&{false false false false false }" interface=lxcb72b56ae1196 k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=default-backend;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend;k8s:io.kubernetes.pod.namespace=ingress-nginx;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=49974 identityLabels="k8s:app.kubernetes.io/component=default-backend,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-backend,k8s:io.kubernetes.pod.namespace=ingress-nginx" ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=535 identity=49974 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80016f7b9a datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=535 identity=49974 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m subsys=endpoint level=info msg="Successful endpoint creation" containerID=80016f7b9a datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=535 identity=49974 ipv4=10.0.0.224 ipv6= k8sPodName=ingress-nginx/ingress-nginx-defaultbackend-6987ff55cf-mmr2m subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.90 071a4dab-80dd-4f76-b52b-2881f2e9d50c default }" containerID=227e2e66cfedf34a793243955031ae18d1daf815ab8f513d3a02d6537b78fdb1 datapathConfiguration="&{false false false false false }" interface=lxc6fb2e329ae42 k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=227e2e66cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2238 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=227e2e66cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2238 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:ingress-nginx k8s:io.cilium.k8s.namespace.labels.name:ingress-nginx]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=admission-webhook;k8s:app.kubernetes.io/instance=ingress-nginx;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=ingress-nginx;k8s:app.kubernetes.io/part-of=ingress-nginx;k8s:app.kubernetes.io/version=1.12.1;k8s:batch.kubernetes.io/controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae;k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch;k8s:controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae;k8s:helm.sh/chart=ingress-nginx-4.12.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx;k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission;k8s:io.kubernetes.pod.namespace=ingress-nginx;k8s:job-name=ingress-nginx-admission-patch;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=227e2e66cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2238 identity=6324 identityLabels="k8s:app.kubernetes.io/component=admission-webhook,k8s:app.kubernetes.io/instance=ingress-nginx,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=ingress-nginx,k8s:app.kubernetes.io/part-of=ingress-nginx,k8s:app.kubernetes.io/version=1.12.1,k8s:batch.kubernetes.io/controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae,k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch,k8s:controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae,k8s:helm.sh/chart=ingress-nginx-4.12.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx,k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission,k8s:io.kubernetes.pod.namespace=ingress-nginx,k8s:job-name=ingress-nginx-admission-patch" ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=227e2e66cf datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2238 identity=6324 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=227e2e66cf datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=2238 identity=6324 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=endpoint level=info msg="Successful endpoint creation" containerID=227e2e66cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2238 identity=6324 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=227e2e66cf endpointID=2238 k8sNamespace=ingress-nginx k8sPodName=ingress-nginx-admission-patch-p5vmt subsys=daemon level=info msg="Releasing key" key="[k8s:app.kubernetes.io/component=admission-webhook k8s:app.kubernetes.io/instance=ingress-nginx k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=ingress-nginx k8s:app.kubernetes.io/part-of=ingress-nginx k8s:app.kubernetes.io/version=1.12.1 k8s:batch.kubernetes.io/controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae k8s:batch.kubernetes.io/job-name=ingress-nginx-admission-patch k8s:controller-uid=fbd8b251-7331-4eef-80ee-180674b266ae k8s:helm.sh/chart=ingress-nginx-4.12.1 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=ingress-nginx k8s:io.cilium.k8s.namespace.labels.name=ingress-nginx k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=ingress-nginx-admission k8s:io.kubernetes.pod.namespace=ingress-nginx k8s:job-name=ingress-nginx-admission-patch]" subsys=allocator level=info msg="Removed endpoint" containerID=227e2e66cf datapathPolicyRevision=1 desiredPolicyRevision=1 endpointID=2238 identity=6324 ipv4=10.0.0.90 ipv6= k8sPodName=ingress-nginx/ingress-nginx-admission-patch-p5vmt subsys=endpoint level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"rabbitmq-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-cluster-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=e11abc12-61c6-4fb6-ab33-287d6090104e] Description:}]" policyAddRequest=4159b927-3e39-4bbf-9392-0ee53c6e80d4 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=4159b927-3e39-4bbf-9392-0ee53c6e80d4 policyRevision=2 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-cluster-operator subsys=k8s-watcher level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"messaging-topology-operator\",\"k8s:app.kubernetes.io/instance\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/name\":\"rabbitmq-cluster-operator\",\"k8s:app.kubernetes.io/part-of\":\"rabbitmq\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9443 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=rabbitmq-messaging-topology-operator k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=15464d13-d06b-44e3-9e42-3fea740553ca] Description:}]" policyAddRequest=c046c230-ff22-4234-95d3-7d659aa30a01 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=c046c230-ff22-4234-95d3-7d659aa30a01 policyRevision=3 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=rabbitmq-messaging-topology-operator subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.89 68b301f0-ad3c-43da-8fd0-2cf5b3d32d0c default }" containerID=697737b4e73fbc5bba121b2b3223dd76f1d876e490e3245757f0e5d4ac0096d5 datapathConfiguration="&{false false false false false }" interface=lxcec7277b240ae k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=697737b4e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=697737b4e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=2.9.0;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=697737b4e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=43996 identityLabels="k8s:app.kubernetes.io/component=rabbitmq-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=2.9.0,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-cluster-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=697737b4e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=534 identity=43996 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=697737b4e7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=534 identity=43996 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c subsys=endpoint level=info msg="Successful endpoint creation" containerID=697737b4e7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=534 identity=43996 ipv4=10.0.0.89 ipv6= k8sPodName=openstack/rabbitmq-cluster-operator-7fcdcd478-xqw9c subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.212 a9d7c441-44c7-4bad-86c6-f735acfc8889 default }" containerID=09d78191c716492a07076f70fd227a856bc8d3c212ba3fc77d95d9cddd32668d datapathConfiguration="&{false false false false false }" interface=lxc96d671cfb19f k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09d78191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09d78191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=messaging-topology-operator;k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=rabbitmq-cluster-operator;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:app.kubernetes.io/version=1.14.1;k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09d78191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=17057 identityLabels="k8s:app.kubernetes.io/component=messaging-topology-operator,k8s:app.kubernetes.io/instance=rabbitmq-cluster-operator,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=rabbitmq-cluster-operator,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:app.kubernetes.io/version=1.14.1,k8s:helm.sh/chart=rabbitmq-cluster-operator-4.3.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-messaging-topology-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09d78191c7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=895 identity=17057 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09d78191c7 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=895 identity=17057 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph subsys=endpoint level=info msg="Successful endpoint creation" containerID=09d78191c7 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=895 identity=17057 ipv4=10.0.0.212 ipv6= k8sPodName=openstack/rabbitmq-messaging-topology-operator-7f8596f788-qr6ph subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.88 0e017b8a-5403-4ae6-aa4f-584b12df68e3 default }" containerID=09b80ca2c1b77693b628e54271156bef35351f0cf61c6a77493a46a3499f1ca6 datapathConfiguration="&{false false false false false }" interface=lxc1b72c4d1eb2d k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=operator;k8s:app.kubernetes.io/instance=pxc-operator;k8s:app.kubernetes.io/name=pxc-operator;k8s:app.kubernetes.io/part-of=pxc-operator;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator;k8s:io.kubernetes.pod.namespace=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=49920 identityLabels="k8s:app.kubernetes.io/component=operator,k8s:app.kubernetes.io/instance=pxc-operator,k8s:app.kubernetes.io/name=pxc-operator,k8s:app.kubernetes.io/part-of=pxc-operator,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=pxc-operator,k8s:io.kubernetes.pod.namespace=openstack" ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=673 identity=49920 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=09b80ca2c1 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=673 identity=49920 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc subsys=endpoint level=info msg="Successful endpoint creation" containerID=09b80ca2c1 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=673 identity=49920 ipv4=10.0.0.88 ipv6= k8sPodName=openstack/pxc-operator-7cff949c8b-hr6tc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.125 2d12ccb5-c5b7-482b-912c-4464df662d9d default }" containerID=edfa24ed0cd6b2c49f249fe0b0665a74c895ad286394c05fa3fbb16d96df42e6 datapathConfiguration="&{false false false false false }" interface=lxc9b03876fee06 k8sPodName=openstack/percona-xtradb-haproxy-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=edfa24ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=edfa24ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=haproxy;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=edfa24ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=17337 identityLabels="k8s:app.kubernetes.io/component=haproxy,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-haproxy-0" ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=edfa24ed0c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3864 identity=17337 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.97 7646b639-410a-44cb-b73c-c3d1c99db9f0 default }" containerID=1285611ce491bf8abc0811c0a6e75039991bc5db0c61f421822cbdef33cec4b8 datapathConfiguration="&{false false false false false }" interface=lxca64585b5f056 k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1285611ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1285611ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:local-path-storage k8s:io.cilium.k8s.namespace.labels.name:local-path-storage]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1285611ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1285611ce4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=9 identity=63556 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=edfa24ed0c datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=3864 identity=17337 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=edfa24ed0c datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=3864 identity=17337 ipv4=10.0.0.125 ipv6= k8sPodName=openstack/percona-xtradb-haproxy-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=1285611ce4 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=9 identity=63556 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=1285611ce4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=9 identity=63556 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=1285611ce4 endpointID=9 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=1285611ce4 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=9 identity=63556 ipv4=10.0.0.97 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-7a5027b0-7e65-4722-bb83-d0e562ee01c5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.166 77b9f8e0-1df6-4732-82a4-60df7580c2da default }" containerID=6a9f6705f3d2f16f1b2b51d6f83818e046424068ca6f9ef9ce63d8bc2fb21663 datapathConfiguration="&{false false false false false }" interface=lxc9e99a8d5ee5e k8sPodName=openstack/percona-xtradb-pxc-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=pxc;k8s:app.kubernetes.io/instance=percona-xtradb;k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator;k8s:app.kubernetes.io/name=percona-xtradb-cluster;k8s:app.kubernetes.io/part-of=percona-xtradb-cluster;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=default;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=13082 identityLabels="k8s:app.kubernetes.io/component=pxc,k8s:app.kubernetes.io/instance=percona-xtradb,k8s:app.kubernetes.io/managed-by=percona-xtradb-cluster-operator,k8s:app.kubernetes.io/name=percona-xtradb-cluster,k8s:app.kubernetes.io/part-of=percona-xtradb-cluster,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=default,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=percona-xtradb-pxc-0" ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=14 identity=13082 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6a9f6705f3 datapathPolicyRevision=0 desiredPolicyRevision=3 endpointID=14 identity=13082 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=6a9f6705f3 datapathPolicyRevision=3 desiredPolicyRevision=3 endpointID=14 identity=13082 ipv4=10.0.0.166 ipv6= k8sPodName=openstack/percona-xtradb-pxc-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/instance\":\"valkey\",\"k8s:app.kubernetes.io/name\":\"valkey\",\"k8s:io.kubernetes.pod.namespace\":\"openstack\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:6379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:26379 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:} {IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:9121 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=valkey k8s:io.cilium.k8s.policy.namespace=openstack k8s:io.cilium.k8s.policy.uid=ad536198-82d8-41cd-b800-f14a979149d5] Description:}]" policyAddRequest=db6a61b3-5a57-44a0-bd3d-3073ea7dd13b subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=valkey subsys=k8s-watcher level=info msg="Policy imported via API, recalculating..." policyAddRequest=db6a61b3-5a57-44a0-bd3d-3073ea7dd13b policyRevision=4 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.191 70cc7f08-98ba-4b3b-80c6-4b574b561293 default }" containerID=9e863f99abba6c72bfc167a5d6b2fd95dd1fe66ead419e2784bb2a6ea308aa0d datapathConfiguration="&{false false false false false }" interface=lxc320c8f256115 k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9e863f99ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9e863f99ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9e863f99ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9e863f99ab datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=755 identity=63556 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9e863f99ab datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=755 identity=63556 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9e863f99ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=63556 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=daemon level=info msg="Delete endpoint request" containerID=9e863f99ab endpointID=755 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=9e863f99ab datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=755 identity=63556 ipv4=10.0.0.191 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-c2f0fcc7-4a7b-489a-9be6-c709c8bb9091 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.216 6a706b7e-9ee9-4a70-bff3-a9d0caa4d6eb default }" containerID=638d732faca17332885a1b7489fbba707d0368a238b16a98ea563d9d9a1b475c datapathConfiguration="&{false false false false false }" interface=lxc9be235e2e434 k8sPodName=openstack/valkey-node-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=638d732fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=638d732fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=node;k8s:app.kubernetes.io/instance=valkey;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=valkey;k8s:app.kubernetes.io/version=8.0.2;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=valkey-2.4.6;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=valkey;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=valkey-node-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=638d732fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=1407 identityLabels="k8s:app.kubernetes.io/component=node,k8s:app.kubernetes.io/instance=valkey,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=valkey,k8s:app.kubernetes.io/version=8.0.2,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=valkey-2.4.6,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=valkey,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=valkey-node-0" ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=638d732fac datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=258 identity=1407 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=638d732fac datapathPolicyRevision=0 desiredPolicyRevision=4 endpointID=258 identity=1407 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=638d732fac datapathPolicyRevision=4 desiredPolicyRevision=4 endpointID=258 identity=1407 ipv4=10.0.0.216 ipv6= k8sPodName=openstack/valkey-node-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Policy Add Request" ciliumNetworkPolicy="[&{EndpointSelector:{\"matchLabels\":{\"k8s:app.kubernetes.io/component\":\"keycloak\",\"k8s:app.kubernetes.io/instance\":\"keycloak\",\"k8s:app.kubernetes.io/name\":\"keycloak\",\"k8s:io.kubernetes.pod.namespace\":\"auth-system\"}} NodeSelector:{} Ingress:[{IngressCommonRule:{FromEndpoints:[{}] FromRequires:[] FromCIDR: FromCIDRSet:[] FromEntities:[] aggregatedSelectors:[]} ToPorts:[{Ports:[{Port:7800 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:} {Ports:[{Port:8080 Protocol:TCP}] TerminatingTLS: OriginatingTLS: ServerNames:[] Listener: Rules:}] ICMPs:[] Authentication:}] IngressDeny:[] Egress:[{EgressCommonRule:{ToEndpoints:[{}] ToRequires:[] ToCIDR: ToCIDRSet:[] ToEntities:[] ToServices:[] ToGroups:[] aggregatedSelectors:[]} ToPorts:[] ToFQDNs:[] ICMPs:[] Authentication:}] EgressDeny:[] Labels:[k8s:io.cilium.k8s.policy.derived-from=NetworkPolicy k8s:io.cilium.k8s.policy.name=keycloak k8s:io.cilium.k8s.policy.namespace=auth-system k8s:io.cilium.k8s.policy.uid=ba0f44be-1191-469b-a932-33c4aefb656c] Description:}]" policyAddRequest=2b21c2ff-8960-420a-97f6-4c5f0c079446 subsys=daemon level=info msg="Policy imported via API, recalculating..." policyAddRequest=2b21c2ff-8960-420a-97f6-4c5f0c079446 policyRevision=5 subsys=daemon level=info msg="NetworkPolicy successfully added" k8sApiVersion= k8sNetworkPolicyName=keycloak subsys=k8s-watcher level=info msg="Create endpoint request" addressing="&{10.0.0.116 ed6ab925-8ea8-4e10-8e27-e9977c761bcb default }" containerID=0062468e83ee38d18b2c31b8cda8a2bc155dc063b173ec9e6a73cd503261c4c1 datapathConfiguration="&{false false false false false }" interface=lxc0c120537b100 k8sPodName=auth-system/keycloak-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0062468e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0062468e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:auth-system k8s:io.cilium.k8s.namespace.labels.name:auth-system]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=keycloak;k8s:app.kubernetes.io/instance=keycloak;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=keycloak;k8s:app.kubernetes.io/version=24.0.5;k8s:apps.kubernetes.io/pod-index=0;k8s:helm.sh/chart=keycloak-21.4.1;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system;k8s:io.cilium.k8s.namespace.labels.name=auth-system;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keycloak;k8s:io.kubernetes.pod.namespace=auth-system;k8s:statefulset.kubernetes.io/pod-name=keycloak-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0062468e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=29790 identityLabels="k8s:app.kubernetes.io/component=keycloak,k8s:app.kubernetes.io/instance=keycloak,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=keycloak,k8s:app.kubernetes.io/version=24.0.5,k8s:apps.kubernetes.io/pod-index=0,k8s:helm.sh/chart=keycloak-21.4.1,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=auth-system,k8s:io.cilium.k8s.namespace.labels.name=auth-system,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keycloak,k8s:io.kubernetes.pod.namespace=auth-system,k8s:statefulset.kubernetes.io/pod-name=keycloak-0" ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0062468e83 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=612 identity=29790 ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0062468e83 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=612 identity=29790 ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0062468e83 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=612 identity=29790 ipv4=10.0.0.116 ipv6= k8sPodName=auth-system/keycloak-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.009462036874213752 newInterval=7m30s subsys=map-ct level=info msg="Create endpoint request" addressing="&{10.0.0.188 2a13a4d9-7460-4c56-9cbb-b115c8e2b02f default }" containerID=7ebb778ee80b1d5854a8a664d261b0bea5d90fb29a70f493c67ff9bfaa1b64a0 datapathConfiguration="&{false false false false false }" interface=lxcd8e8af6cbb2a k8sPodName=monitoring/node-feature-discovery-worker-h6vtj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=worker;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=44359 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-worker,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=worker" ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=609 identity=44359 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.9 a615c7ed-de75-49ac-93b8-e75f72f4bfc3 default }" containerID=05b81ce4058ee9522f0460622496a9bedaa85e994722357c0604fd5a2c47e22c datapathConfiguration="&{false false false false false }" interface=lxcebd41f094c84 k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=05b81ce405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=05b81ce405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.33 40be9198-7fbc-42af-8c5a-53f6a105b665 default }" containerID=f19bd273b489c4465ead67f9313dc5c33ba72121b72ed179dee70272b03e2515 datapathConfiguration="&{false false false false false }" interface=lxc2e6c9b607eab k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb labels="[]" subsys=daemon sync-build=true level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="New endpoint" containerID=f19bd273b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f19bd273b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=gc;" subsys=allocator level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Identity of endpoint changed" containerID=05b81ce405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=13337 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery-gc,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=gc" ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=05b81ce405 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1466 identity=13337 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=node-feature-discovery;k8s:app.kubernetes.io/name=node-feature-discovery;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery;k8s:io.kubernetes.pod.namespace=monitoring;k8s:role=master;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f19bd273b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=31354 identityLabels="k8s:app.kubernetes.io/instance=node-feature-discovery,k8s:app.kubernetes.io/name=node-feature-discovery,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=node-feature-discovery,k8s:io.kubernetes.pod.namespace=monitoring,k8s:role=master" ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f19bd273b4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1151 identity=31354 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7ebb778ee8 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=609 identity=44359 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7ebb778ee8 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=609 identity=44359 ipv4=10.0.0.188 ipv6= k8sPodName=monitoring/node-feature-discovery-worker-h6vtj subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=05b81ce405 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1466 identity=13337 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq subsys=endpoint level=info msg="Successful endpoint creation" containerID=05b81ce405 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1466 identity=13337 ipv4=10.0.0.9 ipv6= k8sPodName=monitoring/node-feature-discovery-gc-6675cbb6d9-8fgrq subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=f19bd273b4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1151 identity=31354 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb subsys=endpoint level=info msg="Successful endpoint creation" containerID=f19bd273b4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1151 identity=31354 ipv4=10.0.0.33 ipv6= k8sPodName=monitoring/node-feature-discovery-master-8665476dbc-s54rb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.135 07cfc7bc-d179-4296-9e40-d6c833789034 default }" containerID=7035056e6974ba76e79795b3d9e1a95e39ed1784bd090f15f887fb5a3b45533f datapathConfiguration="&{false false false false false }" interface=lxca2e7cb1a1571 k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7035056e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7035056e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:secretgen-controller]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=secretgen-controller;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa;k8s:io.kubernetes.pod.namespace=secretgen-controller;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7035056e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identity=54101 identityLabels="k8s:app=secretgen-controller,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=secretgen-controller,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=secretgen-controller-sa,k8s:io.kubernetes.pod.namespace=secretgen-controller" ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=7035056e69 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2886 identity=54101 ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7035056e69 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2886 identity=54101 ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7035056e69 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2886 identity=54101 ipv4=10.0.0.135 ipv6= k8sPodName=secretgen-controller/secretgen-controller-5cf976ccc7-xzffj subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Resolving identity labels (blocking)" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=1 identityLabels="k8s:feature.node.kubernetes.io/cpu-cpuid.ADX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AESNI=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX2=true,k8s:feature.node.kubernetes.io/cpu-cpuid.AVX=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CLZERO=true,k8s:feature.node.kubernetes.io/cpu-cpuid.CMPXCHG8=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FMA3=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.FXSROPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.HYPERVISOR=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IA32_ARCH_CAP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBPB=true,k8s:feature.node.kubernetes.io/cpu-cpuid.IBRS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.LAHF=true,k8s:feature.node.kubernetes.io/cpu-cpuid.MOVBE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.NRIPS=true,k8s:feature.node.kubernetes.io/cpu-cpuid.OSXSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SHA=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SPEC_CTRL_SSBD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SSE4A=true,k8s:feature.node.kubernetes.io/cpu-cpuid.STIBP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVM=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SVMNP=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSCALL=true,k8s:feature.node.kubernetes.io/cpu-cpuid.SYSEE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.TOPEXT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.WBNOINVD=true,k8s:feature.node.kubernetes.io/cpu-cpuid.X87=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XGETBV1=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVE=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEC=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVEOPT=true,k8s:feature.node.kubernetes.io/cpu-cpuid.XSAVES=true,k8s:feature.node.kubernetes.io/cpu-hardware_multithreading=false,k8s:feature.node.kubernetes.io/cpu-model.family=23,k8s:feature.node.kubernetes.io/cpu-model.id=49,k8s:feature.node.kubernetes.io/cpu-model.vendor_id=AMD,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ=true,k8s:feature.node.kubernetes.io/kernel-config.NO_HZ_IDLE=true,k8s:feature.node.kubernetes.io/kernel-version.full=5.15.0-174-generic,k8s:feature.node.kubernetes.io/kernel-version.major=5,k8s:feature.node.kubernetes.io/kernel-version.minor=15,k8s:feature.node.kubernetes.io/kernel-version.revision=0,k8s:feature.node.kubernetes.io/pci-0300_1af4.present=true,k8s:feature.node.kubernetes.io/system-os_release.ID=ubuntu,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.major=22,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID.minor=04,k8s:feature.node.kubernetes.io/system-os_release.VERSION_ID=22.04,k8s:node-role.kubernetes.io/control-plane,k8s:node.kubernetes.io/exclude-from-external-load-balancers,k8s:openstack-compute-node=enabled,k8s:openstack-control-plane=enabled,k8s:openvswitch=enabled,reserved:host" ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Creating or updating CiliumNode resource" node=instance subsys=nodediscovery level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_hostns_00159 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_hostns_00159 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_hostns_00159 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_hostns_00159:pending" subsys=bpf level=info msg="Re-pinning map with ':pending' suffix" bpfMapName=cilium_calls_netdev_00005 bpfMapPath=/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005 subsys=bpf level=info msg="Unpinning map after successful recreation" bpfMapName=cilium_calls_netdev_00005 bpfMapPath="/sys/fs/bpf/tc/globals/cilium_calls_netdev_00005:pending" subsys=bpf level=info msg="Rewrote endpoint BPF program" containerID= datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=159 identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.123 8abdfd51-be6f-4c48-91d8-d7cb497fbaca default }" containerID=3de230adf3c3afb4f03ad60cd480e8c031bcdc0b70b630117d71c9f6d8b6a446 datapathConfiguration="&{false false false false false }" interface=lxcd6a09eb961af k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-create;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-create;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=23890 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-create,k8s:batch.kubernetes.io/controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-create,k8s:release=kube-prometheus-stack" ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2008 identity=23890 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3de230adf3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2008 identity=23890 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3de230adf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=23890 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=3de230adf3 endpointID=2008 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-create-pksj2 subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-create k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16 k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-create k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=4741e0e7-d436-4f29-82c5-e2c154c45b16 k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-create k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=3de230adf3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2008 identity=23890 ipv4=10.0.0.123 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-create-pksj2 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.83 0d4c02ff-1d0b-453c-bd39-7b00c568f7bd default }" containerID=facfcf07864a4ab76e37d73b395dd8bee2e3a27150e1e2be50426075b4af04e6 datapathConfiguration="&{false false false false false }" interface=lxcede0a080d5e9 k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=facfcf0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=facfcf0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-operator;k8s:app.kubernetes.io/component=prometheus-operator;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:chart=kube-prometheus-stack-60.2.0;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=facfcf0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=4667 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-operator,k8s:chart=kube-prometheus-stack-60.2.0,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-operator,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=facfcf0786 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=572 identity=4667 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.73 0b53015d-16b3-4d01-bb47-1173ba533b97 default }" containerID=3ad0f6d5a4a60d33ffbc7613140cd0cdc44edacefd530ed4c8ff1ab90eb8272f datapathConfiguration="&{false false false false false }" interface=lxc0c10f91db041 k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ad0f6d5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ad0f6d5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/name=grafana;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ad0f6d5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=62583 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/name=grafana,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-grafana,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ad0f6d5a4 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=48 identity=62583 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=facfcf0786 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=572 identity=4667 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth subsys=endpoint level=info msg="Successful endpoint creation" containerID=facfcf0786 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=572 identity=4667 ipv4=10.0.0.83 ipv6= k8sPodName=monitoring/kube-prometheus-stack-operator-cd88cf4bf-4ltth subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.34 0f6ffdb8-b508-463c-9c08-ab0db6d8709f default }" containerID=e1cfbd9951e5109f38d1edacf1ed51df2921b044c8eff07f529df930ba325f93 datapathConfiguration="&{false false false false false }" interface=lxc4395d63503da k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e1cfbd9951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e1cfbd9951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=metrics;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-state-metrics;k8s:app.kubernetes.io/part-of=kube-state-metrics;k8s:app.kubernetes.io/version=2.12.0;k8s:helm.sh/chart=kube-state-metrics-5.20.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics;k8s:io.kubernetes.pod.namespace=monitoring;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e1cfbd9951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=55196 identityLabels="k8s:app.kubernetes.io/component=metrics,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-state-metrics,k8s:app.kubernetes.io/part-of=kube-state-metrics,k8s:app.kubernetes.io/version=2.12.0,k8s:helm.sh/chart=kube-state-metrics-5.20.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-kube-state-metrics,k8s:io.kubernetes.pod.namespace=monitoring,k8s:release=kube-prometheus-stack" ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e1cfbd9951 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=362 identity=55196 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3ad0f6d5a4 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=48 identity=62583 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ad0f6d5a4 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=48 identity=62583 ipv4=10.0.0.73 ipv6= k8sPodName=monitoring/kube-prometheus-stack-grafana-7d7b8b8677-fkfvs subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=e1cfbd9951 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=362 identity=55196 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb subsys=endpoint level=info msg="Successful endpoint creation" containerID=e1cfbd9951 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=362 identity=55196 ipv4=10.0.0.34 ipv6= k8sPodName=monitoring/kube-prometheus-stack-kube-state-metrics-5c97764fc9-zhpxb subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.52 518f22d9-b089-4fe2-8aa9-e52a517e8d4b default }" containerID=5de6e76880755d7e655d71d22c749f8f2eb9ad75f9eafb83543d298af2e04e39 datapathConfiguration="&{false false false false false }" interface=lxc18292d7ea5ba k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5de6e76880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5de6e76880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=kube-prometheus-stack-admission-patch;k8s:app.kubernetes.io/component=prometheus-operator-webhook;k8s:app.kubernetes.io/instance=kube-prometheus-stack;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator;k8s:app.kubernetes.io/part-of=kube-prometheus-stack;k8s:app.kubernetes.io/version=60.2.0;k8s:batch.kubernetes.io/controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b;k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch;k8s:chart=kube-prometheus-stack-60.2.0;k8s:controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b;k8s:heritage=Helm;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission;k8s:io.kubernetes.pod.namespace=monitoring;k8s:job-name=kube-prometheus-stack-admission-patch;k8s:release=kube-prometheus-stack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5de6e76880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=25001 identityLabels="k8s:app.kubernetes.io/component=prometheus-operator-webhook,k8s:app.kubernetes.io/instance=kube-prometheus-stack,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator,k8s:app.kubernetes.io/part-of=kube-prometheus-stack,k8s:app.kubernetes.io/version=60.2.0,k8s:app=kube-prometheus-stack-admission-patch,k8s:batch.kubernetes.io/controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b,k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch,k8s:chart=kube-prometheus-stack-60.2.0,k8s:controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b,k8s:heritage=Helm,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission,k8s:io.kubernetes.pod.namespace=monitoring,k8s:job-name=kube-prometheus-stack-admission-patch,k8s:release=kube-prometheus-stack" ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5de6e76880 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1607 identity=25001 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5de6e76880 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1607 identity=25001 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=endpoint level=info msg="Successful endpoint creation" containerID=5de6e76880 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=25001 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.187 7af05dee-5fec-4174-bcf9-856a836c55ab default }" containerID=083406374b329234f6c57f0c20584994dd252380946e2909b2ae86ad2ed7034f datapathConfiguration="&{false false false false false }" interface=lxcfeaf239500b5 k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=083406374b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=083406374b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=083406374b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=083406374b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2711 identity=63556 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=083406374b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2711 identity=63556 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=endpoint level=info msg="Successful endpoint creation" containerID=083406374b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=63556 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.167 09c8e0c5-9899-40fd-9066-8c748664ccd6 default }" containerID=37a99fccb6cee0df03c3c4a92ec1acb18c612d0214b3631d87e38241f6bcbc56 datapathConfiguration="&{false false false false false }" interface=lxc8bb3af41d95e k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=37a99fccb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=37a99fccb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=endpoint level=info msg="Identity of endpoint changed" containerID=37a99fccb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=37a99fccb6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=662 identity=63556 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=endpoint level=info msg="Delete endpoint request" containerID=5de6e76880 endpointID=1607 k8sNamespace=monitoring k8sPodName=kube-prometheus-stack-admission-patch-882rm subsys=daemon level=info msg="Releasing key" key="[k8s:app=kube-prometheus-stack-admission-patch k8s:app.kubernetes.io/component=prometheus-operator-webhook k8s:app.kubernetes.io/instance=kube-prometheus-stack k8s:app.kubernetes.io/managed-by=Helm k8s:app.kubernetes.io/name=kube-prometheus-stack-prometheus-operator k8s:app.kubernetes.io/part-of=kube-prometheus-stack k8s:app.kubernetes.io/version=60.2.0 k8s:batch.kubernetes.io/controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b k8s:batch.kubernetes.io/job-name=kube-prometheus-stack-admission-patch k8s:chart=kube-prometheus-stack-60.2.0 k8s:controller-uid=5eadc41b-30aa-4d8f-9846-0ce6576f585b k8s:heritage=Helm k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring k8s:io.cilium.k8s.namespace.labels.name=monitoring k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-admission k8s:io.kubernetes.pod.namespace=monitoring k8s:job-name=kube-prometheus-stack-admission-patch k8s:release=kube-prometheus-stack]" subsys=allocator level=info msg="Removed endpoint" containerID=5de6e76880 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1607 identity=25001 ipv4=10.0.0.52 ipv6= k8sPodName=monitoring/kube-prometheus-stack-admission-patch-882rm subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=37a99fccb6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=662 identity=63556 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=endpoint level=info msg="Successful endpoint creation" containerID=37a99fccb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=63556 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=daemon level=info msg="Delete endpoint request" containerID=083406374b endpointID=2711 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Delete endpoint request" containerID=37a99fccb6 endpointID=662 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=083406374b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2711 identity=63556 ipv4=10.0.0.187 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-93a8a6f1-c3bd-40b0-9daa-3e1f9bd599db subsys=endpoint level=info msg="Removed endpoint" containerID=37a99fccb6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=662 identity=63556 ipv4=10.0.0.167 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-fc0e6aaf-5857-44fc-b56e-876df564dcff subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.237 568c77cf-7fad-4ba7-874e-d9a2c4c26196 default }" containerID=caeb375c93d74b282797ac4b5a9cbf39a74a4199615bb254caab07121753e640 datapathConfiguration="&{false false false false false }" interface=lxcb03608ca18a4 k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=caeb375c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=caeb375c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=prometheus;k8s:app.kubernetes.io/version=2.51.2;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus;k8s:io.kubernetes.pod.namespace=monitoring;k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus;k8s:operator.prometheus.io/shard=0;k8s:prometheus=kube-prometheus-stack-prometheus;k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=caeb375c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=20213 identityLabels="k8s:app.kubernetes.io/instance=kube-prometheus-stack-prometheus,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=prometheus,k8s:app.kubernetes.io/version=2.51.2,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-prometheus,k8s:io.kubernetes.pod.namespace=monitoring,k8s:operator.prometheus.io/name=kube-prometheus-stack-prometheus,k8s:operator.prometheus.io/shard=0,k8s:prometheus=kube-prometheus-stack-prometheus,k8s:statefulset.kubernetes.io/pod-name=prometheus-kube-prometheus-stack-prometheus-0" ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=caeb375c93 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=24 identity=20213 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=caeb375c93 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=24 identity=20213 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=caeb375c93 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=24 identity=20213 ipv4=10.0.0.237 ipv6= k8sPodName=monitoring/prometheus-kube-prometheus-stack-prometheus-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.234 760cede9-4e44-49f1-aace-5db54f04961a default }" containerID=8722816375e71a2389f6dacf332f378fcacbea374ca85664d440be334fbadbb3 datapathConfiguration="&{false false false false false }" interface=lxcd66a92b0762d k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8722816375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8722816375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:alertmanager=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager;k8s:app.kubernetes.io/managed-by=prometheus-operator;k8s:app.kubernetes.io/name=alertmanager;k8s:app.kubernetes.io/version=0.27.0;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8722816375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 identity=27325 identityLabels="k8s:alertmanager=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/instance=kube-prometheus-stack-alertmanager,k8s:app.kubernetes.io/managed-by=prometheus-operator,k8s:app.kubernetes.io/name=alertmanager,k8s:app.kubernetes.io/version=0.27.0,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=kube-prometheus-stack-alertmanager,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=alertmanager-kube-prometheus-stack-alertmanager-0" ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8722816375 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2849 identity=27325 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=8722816375 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2849 identity=27325 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=8722816375 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2849 identity=27325 ipv4=10.0.0.234 ipv6= k8sPodName=monitoring/alertmanager-kube-prometheus-stack-alertmanager-0 subsys=daemon level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.184 cb40879f-2e5c-4c09-b018-bd89843a89a7 default }" containerID=1dc2e5b5283ab8e6ae0eac57305c60b6f2d2095306397f07da5e76c7bbaea9ec datapathConfiguration="&{false false false false false }" interface=lxc765eed0f8a27 k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=gateway;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=15446 identityLabels="k8s:app.kubernetes.io/component=gateway,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1588 identity=15446 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.181 bd1ff320-6c23-4601-8c53-aa2b383ab196 default }" containerID=3ecde8d0c264b00d0db305b1a5836b3a3efc6323c71bc84e9e10f20ee26070df datapathConfiguration="&{false false false false false }" interface=lxc16288903de77 k8sPodName=monitoring/loki-results-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3ecde8d0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3ecde8d0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-results-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-results-cache;k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3ecde8d0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=7743 identityLabels="k8s:app.kubernetes.io/component=memcached-results-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-results-cache,k8s:statefulset.kubernetes.io/pod-name=loki-results-cache-0" ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=3ecde8d0c2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1785 identity=7743 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.243 644d93f1-e945-4b02-947b-c8d11bfac902 default }" containerID=b399e438a1782f6fce7f81eda903f565d45301dd7ec78f03242c6cb7f75aa2e5 datapathConfiguration="&{false false false false false }" interface=lxc8370f65716eb k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b399e438a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.22 1b517c49-9622-4ca9-bad3-e2372decdf91 default }" containerID=9d2639f7e6bf29fc7506233bfe5fd81f48e177595ffacdcd457eb4dadbb760f3 datapathConfiguration="&{false false false false false }" interface=lxcae1eb76ec8a3 k8sPodName=monitoring/loki-chunks-cache-0 labels="[]" subsys=daemon sync-build=true level=info msg="Resolving identity labels (blocking)" containerID=b399e438a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b399e438a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b oldIdentity="no identity" subsys=endpoint level=info msg="New endpoint" containerID=9d2639f7e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b399e438a1 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3996 identity=63556 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9d2639f7e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=memcached-chunks-cache;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:name=memcached-chunks-cache;k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9d2639f7e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=19871 identityLabels="k8s:app.kubernetes.io/component=memcached-chunks-cache,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:name=memcached-chunks-cache,k8s:statefulset.kubernetes.io/pod-name=loki-chunks-cache-0" ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9d2639f7e6 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1227 identity=19871 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=1dc2e5b528 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1588 identity=15446 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg subsys=endpoint level=info msg="Successful endpoint creation" containerID=1dc2e5b528 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1588 identity=15446 ipv4=10.0.0.184 ipv6= k8sPodName=monitoring/loki-gateway-cf54cb88c-vkmkg subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=b399e438a1 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3996 identity=63556 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=endpoint level=info msg="Successful endpoint creation" containerID=b399e438a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3996 identity=63556 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=3ecde8d0c2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1785 identity=7743 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3ecde8d0c2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1785 identity=7743 ipv4=10.0.0.181 ipv6= k8sPodName=monitoring/loki-results-cache-0 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=9d2639f7e6 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1227 identity=19871 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=9d2639f7e6 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1227 identity=19871 ipv4=10.0.0.22 ipv6= k8sPodName=monitoring/loki-chunks-cache-0 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.214 0d6a24d5-a988-45ee-9937-897ff4fec953 default }" containerID=e31c81001bf304dce3fe0b7f83278462622a86dbf9a5fc8d46532062e8fb466e datapathConfiguration="&{false false false false false }" interface=lxcca6dd1e07d09 k8sPodName=monitoring/vector-bns5z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e31c81001b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e31c81001b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=Agent;k8s:app.kubernetes.io/instance=vector;k8s:app.kubernetes.io/name=vector;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=vector;k8s:io.kubernetes.pod.namespace=monitoring;k8s:vector.dev/exclude=true;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e31c81001b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=1271 identityLabels="k8s:app.kubernetes.io/component=Agent,k8s:app.kubernetes.io/instance=vector,k8s:app.kubernetes.io/name=vector,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=vector,k8s:io.kubernetes.pod.namespace=monitoring,k8s:vector.dev/exclude=true" ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e31c81001b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3431 identity=1271 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e31c81001b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3431 identity=1271 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z subsys=endpoint level=info msg="Successful endpoint creation" containerID=e31c81001b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3431 identity=1271 ipv4=10.0.0.214 ipv6= k8sPodName=monitoring/vector-bns5z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b399e438a1 endpointID=3996 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b399e438a1 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3996 identity=63556 ipv4=10.0.0.243 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-d74ab38b-e766-424a-a0f6-a9ca06dd084b subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.90 ed362478-6ae7-4e28-ba61-6fa964e62e29 default }" containerID=d25735e25f78654fcbe3c4da39a644a35218693b0ff73048ef73908aadd88097 datapathConfiguration="&{false false false false false }" interface=lxcf2d3c7a60c31 k8sPodName=monitoring/loki-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=d25735e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=d25735e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=single-binary;k8s:app.kubernetes.io/instance=loki;k8s:app.kubernetes.io/name=loki;k8s:app.kubernetes.io/part-of=memberlist;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=loki;k8s:io.kubernetes.pod.namespace=monitoring;k8s:statefulset.kubernetes.io/pod-name=loki-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=d25735e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=49835 identityLabels="k8s:app.kubernetes.io/component=single-binary,k8s:app.kubernetes.io/instance=loki,k8s:app.kubernetes.io/name=loki,k8s:app.kubernetes.io/part-of=memberlist,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=loki,k8s:io.kubernetes.pod.namespace=monitoring,k8s:statefulset.kubernetes.io/pod-name=loki-0" ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=d25735e25f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=4058 identity=49835 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=d25735e25f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=4058 identity=49835 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=d25735e25f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=4058 identity=49835 ipv4=10.0.0.90 ipv6= k8sPodName=monitoring/loki-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.215 1f6020f4-0a20-4256-90c1-c296af754367 default }" containerID=48b83a013ce891c19af1e9ff008994c1079f034526eaaa92c56f140892a73f41 datapathConfiguration="&{false false false false false }" interface=lxc599d9c0b9d8f k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48b83a013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48b83a013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:monitoring k8s:io.cilium.k8s.namespace.labels.name:monitoring]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/instance=prometheus-pushgateway;k8s:app.kubernetes.io/managed-by=Helm;k8s:app.kubernetes.io/name=prometheus-pushgateway;k8s:app.kubernetes.io/version=v1.8.0;k8s:helm.sh/chart=prometheus-pushgateway-2.13.0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring;k8s:io.cilium.k8s.namespace.labels.name=monitoring;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway;k8s:io.kubernetes.pod.namespace=monitoring;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48b83a013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=12773 identityLabels="k8s:app.kubernetes.io/instance=prometheus-pushgateway,k8s:app.kubernetes.io/managed-by=Helm,k8s:app.kubernetes.io/name=prometheus-pushgateway,k8s:app.kubernetes.io/version=v1.8.0,k8s:helm.sh/chart=prometheus-pushgateway-2.13.0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=monitoring,k8s:io.cilium.k8s.namespace.labels.name=monitoring,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=prometheus-pushgateway,k8s:io.kubernetes.pod.namespace=monitoring" ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=48b83a013c datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2777 identity=12773 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48b83a013c datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2777 identity=12773 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr subsys=endpoint level=info msg="Successful endpoint creation" containerID=48b83a013c datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2777 identity=12773 ipv4=10.0.0.215 ipv6= k8sPodName=monitoring/prometheus-pushgateway-7b8659c68b-74nsr subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.26 e35a181e-13cc-4030-9f4e-dfd7dedca512 default }" containerID=180713d6da96effbf97d28c49ead80eb0391b44d16f55fa529443b96c24775ea datapathConfiguration="&{false false false false false }" interface=lxce1f065967c86 k8sPodName=openstack/memcached-memcached-6479589586-4twws labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=180713d6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=180713d6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=memcached;k8s:component=server;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=memcached;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=180713d6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=45642 identityLabels="k8s:application=memcached,k8s:component=server,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=memcached-memcached,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=memcached" ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=180713d6da datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3662 identity=45642 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=180713d6da datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3662 identity=45642 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws subsys=endpoint level=info msg="Successful endpoint creation" containerID=180713d6da datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3662 identity=45642 ipv4=10.0.0.26 ipv6= k8sPodName=openstack/memcached-memcached-6479589586-4twws subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.65 2ffbe264-9839-42a0-91bd-9db958714d8a default }" containerID=8d36e681a9174f4073da557a119ef6f99088100cee86b1d267204a9b76cadd83 datapathConfiguration="&{false false false false false }" interface=lxc71f670348cdc k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=8d36e681a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=8d36e681a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=8d36e681a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=8d36e681a9 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=29 identity=63556 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=8d36e681a9 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=29 identity=63556 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=endpoint level=info msg="Successful endpoint creation" containerID=8d36e681a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=63556 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=daemon level=info msg="Delete endpoint request" containerID=8d36e681a9 endpointID=29 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=8d36e681a9 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=29 identity=63556 ipv4=10.0.0.65 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-6a7c314b-bd0b-4298-b77c-4dc3be7637af subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.106 c41e87a7-145f-464c-826a-c246ebbf4a76 default }" containerID=03741c022a12dbbcf5315f063bb6425415b51077359746bb71d8492c384d293e datapathConfiguration="&{false false false false false }" interface=lxcf6dac5673a32 k8sPodName=openstack/rabbitmq-keystone-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=03741c022a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=03741c022a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-keystone;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=03741c022a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=44179 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-keystone,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-keystone-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-keystone-server-0" ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=03741c022a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3266 identity=44179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=03741c022a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3266 identity=44179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=03741c022a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3266 identity=44179 ipv4=10.0.0.106 ipv6= k8sPodName=openstack/rabbitmq-keystone-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.164 2294c903-618d-40aa-a533-070467531345 default }" containerID=9f5297757995d697566ccc980dd500c39531b8871c4c9eeb0b4c253806d48859 datapathConfiguration="&{false false false false false }" interface=lxc3ea224d9f3bb k8sPodName=openstack/keystone-api-56944c466c-gwdtk labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f52977579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f52977579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f52977579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=17530 identityLabels="k8s:application=keystone,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=keystone" ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f52977579 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=848 identity=17530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.223 1c38e202-e138-44be-9ee8-cd114cf0d490 default }" containerID=26fafd8819690fec1d304478b15ecd110709806bae8e8a5024c2a33e07551998 datapathConfiguration="&{false false false false false }" interface=lxcff2371994aa8 k8sPodName=openstack/keystone-credential-setup-nvkw9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=26fafd8819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=26fafd8819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c;k8s:batch.kubernetes.io/job-name=keystone-credential-setup;k8s:component=credential-setup;k8s:controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-credential-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=26fafd8819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=57663 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c,k8s:batch.kubernetes.io/job-name=keystone-credential-setup,k8s:component=credential-setup,k8s:controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-credential-setup,k8s:release_group=keystone" ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=26fafd8819 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=404 identity=57663 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f52977579 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=848 identity=17530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f52977579 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=848 identity=17530 ipv4=10.0.0.164 ipv6= k8sPodName=openstack/keystone-api-56944c466c-gwdtk subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=26fafd8819 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=404 identity=57663 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=26fafd8819 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=404 identity=57663 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=26fafd8819 endpointID=404 k8sNamespace=openstack k8sPodName=keystone-credential-setup-nvkw9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c k8s:batch.kubernetes.io/job-name=keystone-credential-setup k8s:component=credential-setup k8s:controller-uid=0565013d-3ee9-48e4-8634-2147e2e2c09c k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-credential-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-credential-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=26fafd8819 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=404 identity=57663 ipv4=10.0.0.223 ipv6= k8sPodName=openstack/keystone-credential-setup-nvkw9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.179 f380ea7b-081b-4164-945b-74dd23350ce0 default }" containerID=9f57faefd29410064b4d3bcb6513342983fc2e6eeed9be38da80c2a17cd28502 datapathConfiguration="&{false false false false false }" interface=lxcf5f4b38e2397 k8sPodName=openstack/keystone-db-init-b756z labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=9f57faefd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=9f57faefd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557;k8s:batch.kubernetes.io/job-name=keystone-db-init;k8s:component=db-init;k8s:controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=9f57faefd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=3679 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557,k8s:batch.kubernetes.io/job-name=keystone-db-init,k8s:component=db-init,k8s:controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-init,k8s:release_group=keystone" ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=9f57faefd2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=983 identity=3679 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=9f57faefd2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=983 identity=3679 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=endpoint level=info msg="Successful endpoint creation" containerID=9f57faefd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=983 identity=3679 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=9f57faefd2 endpointID=983 k8sNamespace=openstack k8sPodName=keystone-db-init-b756z subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557 k8s:batch.kubernetes.io/job-name=keystone-db-init k8s:component=db-init k8s:controller-uid=b61768d3-1742-4abb-a642-0b1dc9529557 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=9f57faefd2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=983 identity=3679 ipv4=10.0.0.179 ipv6= k8sPodName=openstack/keystone-db-init-b756z subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.59 6b9fff93-8a6e-4f87-9015-81ba672aa027 default }" containerID=48ded7df6de12d452032018bf0dbd6f122f02a190c3f4cb59eb18b6110e68e0d datapathConfiguration="&{false false false false false }" interface=lxc5651d01eea82 k8sPodName=openstack/keystone-fernet-setup-n4pwc labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798;k8s:batch.kubernetes.io/job-name=keystone-fernet-setup;k8s:component=fernet-setup;k8s:controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-fernet-setup;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=9935 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798,k8s:batch.kubernetes.io/job-name=keystone-fernet-setup,k8s:component=fernet-setup,k8s:controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-fernet-setup,k8s:release_group=keystone" ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1878 identity=9935 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=48ded7df6d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1878 identity=9935 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=endpoint level=info msg="Successful endpoint creation" containerID=48ded7df6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=9935 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=48ded7df6d endpointID=1878 k8sNamespace=openstack k8sPodName=keystone-fernet-setup-n4pwc subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798 k8s:batch.kubernetes.io/job-name=keystone-fernet-setup k8s:component=fernet-setup k8s:controller-uid=fac9adb3-22d7-43b0-85ec-c4be28e6e798 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-fernet-setup k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-fernet-setup k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=48ded7df6d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1878 identity=9935 ipv4=10.0.0.59 ipv6= k8sPodName=openstack/keystone-fernet-setup-n4pwc subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.91 68149825-3b37-44b0-a274-e01c1d04c0f9 default }" containerID=a2d50eb0f0433bb65667b190bf5cbc1bfded5f4ac3865790c181e48892b74e47 datapathConfiguration="&{false false false false false }" interface=lxc33fc4d2c3ec9 k8sPodName=openstack/keystone-db-sync-g8fgn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a2d50eb0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a2d50eb0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4;k8s:batch.kubernetes.io/job-name=keystone-db-sync;k8s:component=db-sync;k8s:controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-db-sync;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a2d50eb0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identity=7925 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4,k8s:batch.kubernetes.io/job-name=keystone-db-sync,k8s:component=db-sync,k8s:controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-db-sync,k8s:release_group=keystone" ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a2d50eb0f0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2425 identity=7925 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=a2d50eb0f0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2425 identity=7925 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=endpoint level=info msg="Successful endpoint creation" containerID=a2d50eb0f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2425 identity=7925 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=a2d50eb0f0 endpointID=2425 k8sNamespace=openstack k8sPodName=keystone-db-sync-g8fgn subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4 k8s:batch.kubernetes.io/job-name=keystone-db-sync k8s:component=db-sync k8s:controller-uid=b5fa0488-397b-4b3e-99af-cf2434381be4 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-db-sync k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=a2d50eb0f0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2425 identity=7925 ipv4=10.0.0.91 ipv6= k8sPodName=openstack/keystone-db-sync-g8fgn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.236 4fc5eee1-150c-4b09-8c23-5a215332a19d default }" containerID=0ae239ef6a9d1964e3e8c5a7b923c9b3067cfde94ddfc967fe1f07c54787015c datapathConfiguration="&{false false false false false }" interface=lxcaab779427c63 k8sPodName=openstack/keystone-rabbit-init-vl2x9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0ae239ef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0ae239ef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015;k8s:batch.kubernetes.io/job-name=keystone-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-rabbit-init;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0ae239ef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=5787 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015,k8s:batch.kubernetes.io/job-name=keystone-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-rabbit-init,k8s:release_group=keystone" ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0ae239ef6a datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=81 identity=5787 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=0ae239ef6a datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=81 identity=5787 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=0ae239ef6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=5787 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0ae239ef6a endpointID=81 k8sNamespace=openstack k8sPodName=keystone-rabbit-init-vl2x9 subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015 k8s:batch.kubernetes.io/job-name=keystone-rabbit-init k8s:component=rabbit-init k8s:controller-uid=faff7315-0ce0-4285-bb60-e0be1baea015 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-rabbit-init k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0ae239ef6a datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=81 identity=5787 ipv4=10.0.0.236 ipv6= k8sPodName=openstack/keystone-rabbit-init-vl2x9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.10 7a781fa0-4997-4cda-bd08-f0a237c28bba default }" containerID=af474ef08bff32ece56c74e3282599e55cd265c0a6bd99bfa35cbdac4c668363 datapathConfiguration="&{false false false false false }" interface=lxc174501fac1ac k8sPodName=openstack/keystone-domain-manage-7bcwt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af474ef08b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af474ef08b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b;k8s:batch.kubernetes.io/job-name=keystone-domain-manage;k8s:component=domain-manage;k8s:controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-domain-manage;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=af474ef08b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=37721 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b,k8s:batch.kubernetes.io/job-name=keystone-domain-manage,k8s:component=domain-manage,k8s:controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-domain-manage,k8s:release_group=keystone" ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af474ef08b datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2416 identity=37721 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=af474ef08b datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2416 identity=37721 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=endpoint level=info msg="Successful endpoint creation" containerID=af474ef08b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=37721 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af474ef08b endpointID=2416 k8sNamespace=openstack k8sPodName=keystone-domain-manage-7bcwt subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b k8s:batch.kubernetes.io/job-name=keystone-domain-manage k8s:component=domain-manage k8s:controller-uid=2298a54d-165c-44aa-9a19-35a57b395a0b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-domain-manage k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-domain-manage k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=af474ef08b datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2416 identity=37721 ipv4=10.0.0.10 ipv6= k8sPodName=openstack/keystone-domain-manage-7bcwt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.147 4b690893-2916-4f40-b58f-ee228617bbb9 default }" containerID=0d7ea02e85007fe30fd90f8be156d4017bb1f931667942a039ed9fa464884bc6 datapathConfiguration="&{false false false false false }" interface=lxcae20bf075167 k8sPodName=openstack/keystone-bootstrap-gmchp labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=0d7ea02e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=0d7ea02e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee99e81e-5d81-423e-997d-b197553fac23,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ee99e81e-5d81-423e-997d-b197553fac23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=keystone;k8s:batch.kubernetes.io/controller-uid=ee99e81e-5d81-423e-997d-b197553fac23;k8s:batch.kubernetes.io/job-name=keystone-bootstrap;k8s:component=bootstrap;k8s:controller-uid=ee99e81e-5d81-423e-997d-b197553fac23;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=keystone-bootstrap;k8s:release_group=keystone;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=0d7ea02e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=57174 identityLabels="k8s:application=keystone,k8s:batch.kubernetes.io/controller-uid=ee99e81e-5d81-423e-997d-b197553fac23,k8s:batch.kubernetes.io/job-name=keystone-bootstrap,k8s:component=bootstrap,k8s:controller-uid=ee99e81e-5d81-423e-997d-b197553fac23,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=keystone-bootstrap,k8s:release_group=keystone" ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=0d7ea02e85 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=538 identity=57174 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=0d7ea02e85 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=538 identity=57174 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=endpoint level=info msg="Successful endpoint creation" containerID=0d7ea02e85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=57174 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=0d7ea02e85 endpointID=538 k8sNamespace=openstack k8sPodName=keystone-bootstrap-gmchp subsys=daemon level=info msg="Releasing key" key="[k8s:application=keystone k8s:batch.kubernetes.io/controller-uid=ee99e81e-5d81-423e-997d-b197553fac23 k8s:batch.kubernetes.io/job-name=keystone-bootstrap k8s:component=bootstrap k8s:controller-uid=ee99e81e-5d81-423e-997d-b197553fac23 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=keystone-bootstrap k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=keystone-bootstrap k8s:release_group=keystone]" subsys=allocator level=info msg="Removed endpoint" containerID=0d7ea02e85 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=538 identity=57174 ipv4=10.0.0.147 ipv6= k8sPodName=openstack/keystone-bootstrap-gmchp subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.189 9f4c22b9-0781-43b0-8bd2-d685b624e047 default }" containerID=b28445817576ff8050cd6df63ff62692b1e872dee3ee70fe486d10e9335ffa49 datapathConfiguration="&{false false false false false }" interface=lxc9479e53fdfab k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b284458175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b284458175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=b284458175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b284458175 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=946 identity=63556 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b284458175 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=946 identity=63556 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=endpoint level=info msg="Successful endpoint creation" containerID=b284458175 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=946 identity=63556 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=daemon level=info msg="Delete endpoint request" containerID=b284458175 endpointID=946 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=b284458175 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=946 identity=63556 ipv4=10.0.0.189 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-09826065-d7d8-4567-b661-f4fedac519eb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.12 6408a8f1-e9cf-410c-a7cf-9bb88365e7f0 default }" containerID=14d48c2da2c085d4e4845db37b2f1fb06e42bbb4645bf0a3b341e06483b98c15 datapathConfiguration="&{false false false false false }" interface=lxce5db013c2fc8 k8sPodName=openstack/rabbitmq-barbican-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=14d48c2da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=14d48c2da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-barbican;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=14d48c2da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=41789 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-barbican,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-barbican-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-barbican-server-0" ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=14d48c2da2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3550 identity=41789 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=14d48c2da2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3550 identity=41789 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=14d48c2da2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3550 identity=41789 ipv4=10.0.0.12 ipv6= k8sPodName=openstack/rabbitmq-barbican-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.110 0e1d86ea-2853-4ced-9680-748d8d04ade7 default }" containerID=5f8075257d85c5d69eb51c2c6b05954b15c083190441683056397a4e61be5431 datapathConfiguration="&{false false false false false }" interface=lxcf1fc17004907 k8sPodName=openstack/barbican-api-7796d47b85-kdgpd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f8075257d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f8075257d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f8075257d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=2424 identityLabels="k8s:application=barbican,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=barbican" ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f8075257d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=126 identity=2424 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.180 3bb4ae16-4f1e-4c77-8e26-23772f0d6704 default }" containerID=6d39f06426ac6b8f35ddd0e3ac2efd1e8a914fba3044b63f7fb524cf7609b908 datapathConfiguration="&{false false false false false }" interface=lxcabbcff362204 k8sPodName=openstack/barbican-db-init-9pp5c labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6d39f06426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6d39f06426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=015006c7-6eac-4597-8b40-a07be2103267,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=015006c7-6eac-4597-8b40-a07be2103267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=015006c7-6eac-4597-8b40-a07be2103267;k8s:batch.kubernetes.io/job-name=barbican-db-init;k8s:component=db-init;k8s:controller-uid=015006c7-6eac-4597-8b40-a07be2103267;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6d39f06426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=48963 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=015006c7-6eac-4597-8b40-a07be2103267,k8s:batch.kubernetes.io/job-name=barbican-db-init,k8s:component=db-init,k8s:controller-uid=015006c7-6eac-4597-8b40-a07be2103267,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-init,k8s:release_group=barbican" ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6d39f06426 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1159 identity=48963 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=5f8075257d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=126 identity=2424 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f8075257d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=126 identity=2424 ipv4=10.0.0.110 ipv6= k8sPodName=openstack/barbican-api-7796d47b85-kdgpd subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=6d39f06426 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1159 identity=48963 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=endpoint level=info msg="Successful endpoint creation" containerID=6d39f06426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=48963 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6d39f06426 endpointID=1159 k8sNamespace=openstack k8sPodName=barbican-db-init-9pp5c subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=015006c7-6eac-4597-8b40-a07be2103267 k8s:batch.kubernetes.io/job-name=barbican-db-init k8s:component=db-init k8s:controller-uid=015006c7-6eac-4597-8b40-a07be2103267 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=6d39f06426 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1159 identity=48963 ipv4=10.0.0.180 ipv6= k8sPodName=openstack/barbican-db-init-9pp5c subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.185 0b636601-a192-4321-a1d3-ba25778a1142 default }" containerID=af636d5f5d3fc492f122193cad80c31cfb8522a37917292cfcdafdc34831bd56 datapathConfiguration="&{false false false false false }" interface=lxc8a5c1bfdaaf3 k8sPodName=openstack/barbican-db-sync-p9nxl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=af636d5f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=af636d5f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb;k8s:batch.kubernetes.io/job-name=barbican-db-sync;k8s:component=db-sync;k8s:controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-db-sync;k8s:release_group=barbican;" subsys=allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Identity of endpoint changed" containerID=af636d5f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=44029 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb,k8s:batch.kubernetes.io/job-name=barbican-db-sync,k8s:component=db-sync,k8s:controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-db-sync,k8s:release_group=barbican" ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=af636d5f5d datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=927 identity=44029 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=af636d5f5d datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=927 identity=44029 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=endpoint level=info msg="Successful endpoint creation" containerID=af636d5f5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=44029 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=af636d5f5d endpointID=927 k8sNamespace=openstack k8sPodName=barbican-db-sync-p9nxl subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb k8s:batch.kubernetes.io/job-name=barbican-db-sync k8s:component=db-sync k8s:controller-uid=3a2dd471-9b02-4937-afae-a370883afdcb k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-db-sync k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=af636d5f5d datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=927 identity=44029 ipv4=10.0.0.185 ipv6= k8sPodName=openstack/barbican-db-sync-p9nxl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 84248dab-a9b3-4e7b-9b73-53b747e222e7 default }" containerID=e0d7a836e775da59153eee0a969254300fe2b2f0296ae2cc35f718d03d18134a datapathConfiguration="&{false false false false false }" interface=lxcd5afc65badcf k8sPodName=openstack/barbican-rabbit-init-5vw82 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0d7a836e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0d7a836e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc;k8s:batch.kubernetes.io/job-name=barbican-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-rabbit-init;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=e0d7a836e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=56062 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc,k8s:batch.kubernetes.io/job-name=barbican-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-rabbit-init,k8s:release_group=barbican" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=e0d7a836e7 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1095 identity=56062 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=endpoint level=info msg="Conntrack garbage collector interval recalculated" deleteRatio=0.03574810285822501 newInterval=11m15s subsys=map-ct level=info msg="Rewrote endpoint BPF program" containerID=e0d7a836e7 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1095 identity=56062 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0d7a836e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=56062 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0d7a836e7 endpointID=1095 k8sNamespace=openstack k8sPodName=barbican-rabbit-init-5vw82 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc k8s:batch.kubernetes.io/job-name=barbican-rabbit-init k8s:component=rabbit-init k8s:controller-uid=48cd3cdd-0a43-4f37-b2b8-993282b1f8bc k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-rabbit-init k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=e0d7a836e7 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1095 identity=56062 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/barbican-rabbit-init-5vw82 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 ca153ccc-7442-44b6-9706-36530065c733 default }" containerID=c1ddda2e2f2714e939b8cfc5b136ff81bb27a8def62003b13041f9bfadccb7b3 datapathConfiguration="&{false false false false false }" interface=lxcb5b51abf9a00 k8sPodName=openstack/barbican-ks-service-6l7rt labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c1ddda2e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c1ddda2e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce;k8s:batch.kubernetes.io/job-name=barbican-ks-service;k8s:component=ks-service;k8s:controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-service;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c1ddda2e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=16549 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce,k8s:batch.kubernetes.io/job-name=barbican-ks-service,k8s:component=ks-service,k8s:controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-service,k8s:release_group=barbican" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c1ddda2e2f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2780 identity=16549 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=c1ddda2e2f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2780 identity=16549 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=endpoint level=info msg="Successful endpoint creation" containerID=c1ddda2e2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2780 identity=16549 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c1ddda2e2f endpointID=2780 k8sNamespace=openstack k8sPodName=barbican-ks-service-6l7rt subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce k8s:batch.kubernetes.io/job-name=barbican-ks-service k8s:component=ks-service k8s:controller-uid=8c28b5f2-b46b-4144-a138-d159df5169ce k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-service k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c1ddda2e2f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2780 identity=16549 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/barbican-ks-service-6l7rt subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.68 b3478367-bf07-4660-83bb-abfd22d23593 default }" containerID=c376af58305056beb3309d5736bec9a2ea83bd99ad9e628fcc1a13154734fe89 datapathConfiguration="&{false false false false false }" interface=lxc68aa7a8e2924 k8sPodName=openstack/barbican-ks-endpoints-86ntd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c376af5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c376af5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=decd2974-a131-4d05-9a74-2b5a202532af,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=decd2974-a131-4d05-9a74-2b5a202532af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=decd2974-a131-4d05-9a74-2b5a202532af;k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=decd2974-a131-4d05-9a74-2b5a202532af;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-endpoints;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c376af5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identity=63223 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=decd2974-a131-4d05-9a74-2b5a202532af,k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=decd2974-a131-4d05-9a74-2b5a202532af,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-endpoints,k8s:release_group=barbican" ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=c376af5830 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2094 identity=63223 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=c376af5830 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2094 identity=63223 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=endpoint level=info msg="Successful endpoint creation" containerID=c376af5830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2094 identity=63223 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=c376af5830 endpointID=2094 k8sNamespace=openstack k8sPodName=barbican-ks-endpoints-86ntd subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=decd2974-a131-4d05-9a74-2b5a202532af k8s:batch.kubernetes.io/job-name=barbican-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=decd2974-a131-4d05-9a74-2b5a202532af k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-endpoints k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=c376af5830 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2094 identity=63223 ipv4=10.0.0.68 ipv6= k8sPodName=openstack/barbican-ks-endpoints-86ntd subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.46 8cadeb1d-ff2e-425f-b245-8c22889ba925 default }" containerID=74a083b766e8efcedf61af5cd206fc0acb08ab19e77cb97522a7428cfff3bf02 datapathConfiguration="&{false false false false false }" interface=lxc50f73437d7fc k8sPodName=openstack/barbican-ks-user-ds9s2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=barbican;k8s:batch.kubernetes.io/controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62;k8s:batch.kubernetes.io/job-name=barbican-ks-user;k8s:component=ks-user;k8s:controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=barbican-ks-user;k8s:release_group=barbican;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=48329 identityLabels="k8s:application=barbican,k8s:batch.kubernetes.io/controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62,k8s:batch.kubernetes.io/job-name=barbican-ks-user,k8s:component=ks-user,k8s:controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=barbican-ks-user,k8s:release_group=barbican" ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1498 identity=48329 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=74a083b766 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1498 identity=48329 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=74a083b766 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1498 identity=48329 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=74a083b766 endpointID=1498 k8sNamespace=openstack k8sPodName=barbican-ks-user-ds9s2 subsys=daemon level=info msg="Releasing key" key="[k8s:application=barbican k8s:batch.kubernetes.io/controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62 k8s:batch.kubernetes.io/job-name=barbican-ks-user k8s:component=ks-user k8s:controller-uid=00859ca3-5570-4d7c-9b30-7448df267c62 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=barbican-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=barbican-ks-user k8s:release_group=barbican]" subsys=allocator level=info msg="Removed endpoint" containerID=74a083b766 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1498 identity=48329 ipv4=10.0.0.46 ipv6= k8sPodName=openstack/barbican-ks-user-ds9s2 subsys=endpoint level=info msg="Activity in /host/etc/cni/net.d/, re-generating CNI configuration" subsys=cni-config level=info msg="Generating CNI configuration file with mode none" subsys=cni-config level=info msg="Create endpoint request" addressing="&{10.0.0.119 01f7b1fc-30f6-4170-8205-df522237a948 default }" containerID=80cec8a864fcd2a33e52769486bd2acde642f42c2defe2ee7431c3445c792b71 datapathConfiguration="&{false false false false false }" interface=lxc27321242516b k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:rook-ceph k8s:io.cilium.k8s.namespace.labels.name:rook-ceph]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-operator;k8s:helm.sh/chart=rook-ceph-v1.15.9;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph;k8s:io.cilium.k8s.namespace.labels.name=rook-ceph;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system;k8s:io.kubernetes.pod.namespace=rook-ceph;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=34825 identityLabels="k8s:app=rook-ceph-operator,k8s:helm.sh/chart=rook-ceph-v1.15.9,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=rook-ceph,k8s:io.cilium.k8s.namespace.labels.name=rook-ceph,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-system,k8s:io.kubernetes.pod.namespace=rook-ceph" ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=760 identity=34825 ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=80cec8a864 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=760 identity=34825 ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s subsys=endpoint level=info msg="Successful endpoint creation" containerID=80cec8a864 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=760 identity=34825 ipv4=10.0.0.119 ipv6= k8sPodName=rook-ceph/rook-ceph-operator-76bbbb77ff-5ns5s subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.141 169bf179-29a6-471d-b098-4d89a7295cc6 default }" containerID=6fc3a623a053c9b0e79c2ac484cf07927d1b9fed55f15c3094846a393e5d17c3 datapathConfiguration="&{false false false false false }" interface=lxc50d309bb5590 k8sPodName=openstack/rook-ceph-detect-version-wzmzf labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=6fc3a623a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3803 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=6fc3a623a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3803 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=14e70e29-a273-421c-9116-54a84ab2163f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=14e70e29-a273-421c-9116-54a84ab2163f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:app=rook-ceph-detect-version;k8s:batch.kubernetes.io/controller-uid=14e70e29-a273-421c-9116-54a84ab2163f;k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version;k8s:controller-uid=14e70e29-a273-421c-9116-54a84ab2163f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=rook-ceph-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=6fc3a623a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3803 identity=48382 identityLabels="k8s:app=rook-ceph-detect-version,k8s:batch.kubernetes.io/controller-uid=14e70e29-a273-421c-9116-54a84ab2163f,k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version,k8s:controller-uid=14e70e29-a273-421c-9116-54a84ab2163f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=rook-ceph-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=6fc3a623a0 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3803 identity=48382 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=6fc3a623a0 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3803 identity=48382 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=endpoint level=info msg="Successful endpoint creation" containerID=6fc3a623a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3803 identity=48382 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=6fc3a623a0 endpointID=3803 k8sNamespace=openstack k8sPodName=rook-ceph-detect-version-wzmzf subsys=daemon level=info msg="Releasing key" key="[k8s:app=rook-ceph-detect-version k8s:batch.kubernetes.io/controller-uid=14e70e29-a273-421c-9116-54a84ab2163f k8s:batch.kubernetes.io/job-name=rook-ceph-detect-version k8s:controller-uid=14e70e29-a273-421c-9116-54a84ab2163f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=rook-ceph-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=6fc3a623a0 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3803 identity=48382 ipv4=10.0.0.141 ipv6= k8sPodName=openstack/rook-ceph-detect-version-wzmzf subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.120 b79cc555-33eb-4dbd-b7ea-b11d80cbecb5 default }" containerID=2f24e4345ed2bac3878e8d7c35c9044a490cb7ea30122b25c3138ae51a054f77 datapathConfiguration="&{false false false false false }" interface=lxc645c8b2d7e3c k8sPodName=openstack/ceph-object-controller-detect-version-h4llb labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=2f24e4345e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=2f24e4345e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=ceph-object-controller-detect-version;k8s:batch.kubernetes.io/controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e;k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version;k8s:controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=ceph-object-controller-detect-version;k8s:rook-version=v1.15.9;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=2f24e4345e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=798 identityLabels="k8s:app=ceph-object-controller-detect-version,k8s:batch.kubernetes.io/controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e,k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version,k8s:controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=ceph-object-controller-detect-version,k8s:rook-version=v1.15.9" ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=2f24e4345e datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=112 identity=798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=2f24e4345e datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=112 identity=798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=endpoint level=info msg="Successful endpoint creation" containerID=2f24e4345e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=daemon level=info msg="Delete endpoint request" containerID=2f24e4345e endpointID=112 k8sNamespace=openstack k8sPodName=ceph-object-controller-detect-version-h4llb subsys=daemon level=info msg="Releasing key" key="[k8s:app=ceph-object-controller-detect-version k8s:batch.kubernetes.io/controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e k8s:batch.kubernetes.io/job-name=ceph-object-controller-detect-version k8s:controller-uid=f2147ff1-b811-4f2d-a690-794fbbabb38e k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-cmd-reporter k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=ceph-object-controller-detect-version k8s:rook-version=v1.15.9]" subsys=allocator level=info msg="Removed endpoint" containerID=2f24e4345e datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=112 identity=798 ipv4=10.0.0.120 ipv6= k8sPodName=openstack/ceph-object-controller-detect-version-h4llb subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.17 5e78b258-9bda-48e5-ba65-e301ff39d3df default }" containerID=72bf002150a1ec1697f9351760339744564d1748265213b56b842f5f054427dd datapathConfiguration="&{false false false false false }" interface=lxca19d84d0be42 k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=72bf002150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=72bf002150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=endpoint level=info msg="Reusing existing global key" key="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage;k8s:io.cilium.k8s.namespace.labels.name=local-path-storage;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner;k8s:io.kubernetes.pod.namespace=local-path-storage;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=72bf002150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=63556 identityLabels="k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage,k8s:io.cilium.k8s.namespace.labels.name=local-path-storage,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner,k8s:io.kubernetes.pod.namespace=local-path-storage" ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=72bf002150 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2154 identity=63556 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=72bf002150 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2154 identity=63556 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=endpoint level=info msg="Successful endpoint creation" containerID=72bf002150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2154 identity=63556 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=daemon level=info msg="Delete endpoint request" containerID=72bf002150 endpointID=2154 k8sNamespace=local-path-storage k8sPodName=helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=daemon level=info msg="Releasing key" key="[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=local-path-storage k8s:io.cilium.k8s.namespace.labels.name=local-path-storage k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=local-path-provisioner k8s:io.kubernetes.pod.namespace=local-path-storage]" subsys=allocator level=info msg="Removed endpoint" containerID=72bf002150 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2154 identity=63556 ipv4=10.0.0.17 ipv6= k8sPodName=local-path-storage/helper-pod-create-pvc-71372d45-e475-47f9-b5f1-3a001769f7f9 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.136 4d869c2d-cfd2-4709-9f1e-202605c2a882 default }" containerID=ad48131ec25f310e8648dad42cdef913bcd3f4988dff85f2b02c04ccc9266a56 datapathConfiguration="&{false false false false false }" interface=lxcc3bcf4f51438 k8sPodName=openstack/rabbitmq-glance-server-0 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=ad48131ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=ad48131ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app.kubernetes.io/component=rabbitmq;k8s:app.kubernetes.io/name=rabbitmq-glance;k8s:app.kubernetes.io/part-of=rabbitmq;k8s:apps.kubernetes.io/pod-index=0;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server;k8s:io.kubernetes.pod.namespace=openstack;k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=ad48131ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=38650 identityLabels="k8s:app.kubernetes.io/component=rabbitmq,k8s:app.kubernetes.io/name=rabbitmq-glance,k8s:app.kubernetes.io/part-of=rabbitmq,k8s:apps.kubernetes.io/pod-index=0,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rabbitmq-glance-server,k8s:io.kubernetes.pod.namespace=openstack,k8s:statefulset.kubernetes.io/pod-name=rabbitmq-glance-server-0" ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=ad48131ec2 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=165 identity=38650 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=ad48131ec2 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=165 identity=38650 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=endpoint level=info msg="Successful endpoint creation" containerID=ad48131ec2 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=165 identity=38650 ipv4=10.0.0.136 ipv6= k8sPodName=openstack/rabbitmq-glance-server-0 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.43 d59448ac-1f7f-4d7a-aadd-75358a3bcb17 default }" containerID=e0335ed0d3f2f24dc4cd383ac6b832338f16a2cfd9107f2221faeabfce841d84 datapathConfiguration="&{false false false false false }" interface=lxc6c62f26d432b k8sPodName=openstack/glance-db-init-7499x labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa;k8s:batch.kubernetes.io/job-name=glance-db-init;k8s:component=db-init;k8s:controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-init;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=15077 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa,k8s:batch.kubernetes.io/job-name=glance-db-init,k8s:component=db-init,k8s:controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-init,k8s:release_group=glance" ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2387 identity=15077 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=e0335ed0d3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2387 identity=15077 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=endpoint level=info msg="Successful endpoint creation" containerID=e0335ed0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2387 identity=15077 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=e0335ed0d3 endpointID=2387 k8sNamespace=openstack k8sPodName=glance-db-init-7499x subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa k8s:batch.kubernetes.io/job-name=glance-db-init k8s:component=db-init k8s:controller-uid=79a5da43-a5fb-4f58-a304-835a3e240daa k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=e0335ed0d3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2387 identity=15077 ipv4=10.0.0.43 ipv6= k8sPodName=openstack/glance-db-init-7499x subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.241 9d887783-e840-4538-b21a-800850e3cec3 default }" containerID=94ddff67e395a315b5fae86e00f424b40ac0fa29a400e3b30274ecb5b2984bfa datapathConfiguration="&{false false false false false }" interface=lxc4308b57e3d18 k8sPodName=openstack/glance-db-sync-wgdgj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=94ddff67e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=94ddff67e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f;k8s:batch.kubernetes.io/job-name=glance-db-sync;k8s:component=db-sync;k8s:controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-db-sync;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=94ddff67e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=28349 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f,k8s:batch.kubernetes.io/job-name=glance-db-sync,k8s:component=db-sync,k8s:controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-db-sync,k8s:release_group=glance" ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=94ddff67e3 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=526 identity=28349 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=94ddff67e3 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=526 identity=28349 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=endpoint level=info msg="Successful endpoint creation" containerID=94ddff67e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=28349 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.159 eaf4a5fd-de67-4aff-a427-59c17076c214 default }" containerID=a615e47cee1bf6bd60e60eca2eb98fd5ed98c02c122acb6eaab91befc34b3658 datapathConfiguration="&{false false false false false }" interface=lxc561f798ad50f k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:app=rook-ceph-rgw;k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io;k8s:app.kubernetes.io/created-by=rook-ceph-operator;k8s:app.kubernetes.io/instance=ceph;k8s:app.kubernetes.io/managed-by=rook-ceph-operator;k8s:app.kubernetes.io/name=ceph-rgw;k8s:app.kubernetes.io/part-of=ceph;k8s:ceph_daemon_id=ceph;k8s:ceph_daemon_type=rgw;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw;k8s:io.kubernetes.pod.namespace=openstack;k8s:rgw=ceph;k8s:rook.io/operator-namespace=rook-ceph;k8s:rook_cluster=openstack;k8s:rook_object_store=ceph;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=64399 identityLabels="k8s:app.kubernetes.io/component=cephobjectstores.ceph.rook.io,k8s:app.kubernetes.io/created-by=rook-ceph-operator,k8s:app.kubernetes.io/instance=ceph,k8s:app.kubernetes.io/managed-by=rook-ceph-operator,k8s:app.kubernetes.io/name=ceph-rgw,k8s:app.kubernetes.io/part-of=ceph,k8s:app=rook-ceph-rgw,k8s:ceph_daemon_id=ceph,k8s:ceph_daemon_type=rgw,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-rgw,k8s:io.kubernetes.pod.namespace=openstack,k8s:rgw=ceph,k8s:rook.io/operator-namespace=rook-ceph,k8s:rook_cluster=openstack,k8s:rook_object_store=ceph" ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=356 identity=64399 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.154 185cffd1-6ca9-4f44-a03b-6c451e0c4808 default }" containerID=5f3e5bf45190f750db47922bd6175c3ee1df4b93765bf72ed8b491df91828671 datapathConfiguration="&{false false false false false }" interface=lxc9c3744c6b263 k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=5f3e5bf451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=5f3e5bf451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:app=rook-ceph-crashcollector;k8s:ceph-version=18.2.7-0;k8s:ceph_daemon_id=crash;k8s:crashcollector=crash;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default;k8s:io.kubernetes.pod.namespace=openstack;k8s:node_name=instance;k8s:rook_cluster=openstack;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=5f3e5bf451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=63855 identityLabels="k8s:app=rook-ceph-crashcollector,k8s:ceph-version=18.2.7-0,k8s:ceph_daemon_id=crash,k8s:crashcollector=crash,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=rook-ceph-default,k8s:io.kubernetes.pod.namespace=openstack,k8s:node_name=instance,k8s:rook_cluster=openstack" ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=5f3e5bf451 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1258 identity=63855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=a615e47cee datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=356 identity=64399 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 subsys=endpoint level=info msg="Successful endpoint creation" containerID=a615e47cee datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=356 identity=64399 ipv4=10.0.0.159 ipv6= k8sPodName=openstack/rook-ceph-rgw-ceph-a-699b8bdb59-n2sm4 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=5f3e5bf451 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1258 identity=63855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 subsys=endpoint level=info msg="Successful endpoint creation" containerID=5f3e5bf451 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1258 identity=63855 ipv4=10.0.0.154 ipv6= k8sPodName=openstack/rook-ceph-crashcollector-instance-754c646bfd-f2np2 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=94ddff67e3 endpointID=526 k8sNamespace=openstack k8sPodName=glance-db-sync-wgdgj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f k8s:batch.kubernetes.io/job-name=glance-db-sync k8s:component=db-sync k8s:controller-uid=5dfa89ac-8d5e-4b2c-ad09-73b2fdf27b9f k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-db-sync k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-db-sync k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=94ddff67e3 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=526 identity=28349 ipv4=10.0.0.241 ipv6= k8sPodName=openstack/glance-db-sync-wgdgj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.75 c1ec1e24-28a9-44d5-80de-8b5066c11dcd default }" containerID=be54e6ccda0881edf8d6974f398cac33c80cac899a7be3d8bace45afc77efc55 datapathConfiguration="&{false false false false false }" interface=lxc1bfc9f362bf5 k8sPodName=openstack/glance-rabbit-init-6q5rl labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Invalid state transition skipped" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl line=611 subsys=endpoint level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b;k8s:batch.kubernetes.io/job-name=glance-rabbit-init;k8s:component=rabbit-init;k8s:controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-rabbit-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=16853 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b,k8s:batch.kubernetes.io/job-name=glance-rabbit-init,k8s:component=rabbit-init,k8s:controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-rabbit-init,k8s:release_group=glance" ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3117 identity=16853 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=be54e6ccda datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3117 identity=16853 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=endpoint level=info msg="Successful endpoint creation" containerID=be54e6ccda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=16853 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=be54e6ccda endpointID=3117 k8sNamespace=openstack k8sPodName=glance-rabbit-init-6q5rl subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b k8s:batch.kubernetes.io/job-name=glance-rabbit-init k8s:component=rabbit-init k8s:controller-uid=8ff2bfa3-b53b-42ba-ac58-484a22734e2b k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-rabbit-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-rabbit-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=be54e6ccda datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3117 identity=16853 ipv4=10.0.0.75 ipv6= k8sPodName=openstack/glance-rabbit-init-6q5rl subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.210 32b19f02-b6e7-46cc-a83b-db852e2123fd default }" containerID=3f8c7e0329eaaeb0382ef269bf7f9015ad2d8167ca5c09a2b1a63a1c3e5ef4c3 datapathConfiguration="&{false false false false false }" interface=lxc446ae543ed33 k8sPodName=openstack/glance-ks-service-5zw24 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=3f8c7e0329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=3f8c7e0329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca;k8s:batch.kubernetes.io/job-name=glance-ks-service;k8s:component=ks-service;k8s:controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-service;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=3f8c7e0329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identity=65463 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca,k8s:batch.kubernetes.io/job-name=glance-ks-service,k8s:component=ks-service,k8s:controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-service,k8s:release_group=glance" ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=3f8c7e0329 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2845 identity=65463 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=3f8c7e0329 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2845 identity=65463 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=endpoint level=info msg="Successful endpoint creation" containerID=3f8c7e0329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2845 identity=65463 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=daemon level=info msg="Delete endpoint request" containerID=3f8c7e0329 endpointID=2845 k8sNamespace=openstack k8sPodName=glance-ks-service-5zw24 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca k8s:batch.kubernetes.io/job-name=glance-ks-service k8s:component=ks-service k8s:controller-uid=027eadc3-e80e-4b7c-bf3c-ff7ae640cbca k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-service k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-service k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=3f8c7e0329 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2845 identity=65463 ipv4=10.0.0.210 ipv6= k8sPodName=openstack/glance-ks-service-5zw24 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.145 2363775c-ba14-4c26-ac9b-6d8c11f27148 default }" containerID=45c3b42b7681cdad60b31e6a0e5b1b2a1fceba101fdb877fdd8183400a0de8e7 datapathConfiguration="&{false false false false false }" interface=lxc55867e4e1c2f k8sPodName=openstack/glance-ks-endpoints-km58t labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=45c3b42b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=45c3b42b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=016063c6-0f57-4e38-9c57-963275b18745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=016063c6-0f57-4e38-9c57-963275b18745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=016063c6-0f57-4e38-9c57-963275b18745;k8s:batch.kubernetes.io/job-name=glance-ks-endpoints;k8s:component=ks-endpoints;k8s:controller-uid=016063c6-0f57-4e38-9c57-963275b18745;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-endpoints;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=45c3b42b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=4102 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=016063c6-0f57-4e38-9c57-963275b18745,k8s:batch.kubernetes.io/job-name=glance-ks-endpoints,k8s:component=ks-endpoints,k8s:controller-uid=016063c6-0f57-4e38-9c57-963275b18745,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-endpoints,k8s:release_group=glance" ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=45c3b42b76 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=2 identity=4102 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=45c3b42b76 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=2 identity=4102 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=endpoint level=info msg="Successful endpoint creation" containerID=45c3b42b76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=4102 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=45c3b42b76 endpointID=2 k8sNamespace=openstack k8sPodName=glance-ks-endpoints-km58t subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=016063c6-0f57-4e38-9c57-963275b18745 k8s:batch.kubernetes.io/job-name=glance-ks-endpoints k8s:component=ks-endpoints k8s:controller-uid=016063c6-0f57-4e38-9c57-963275b18745 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-endpoints k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-endpoints k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=45c3b42b76 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=2 identity=4102 ipv4=10.0.0.145 ipv6= k8sPodName=openstack/glance-ks-endpoints-km58t subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.27 8b8ea85c-7ce6-461d-95e6-c12408c7a136 default }" containerID=b4ea6ecc79c111c32299ffb0b54b99daa384f45a00b2b8f7ac1721c3b10947a1 datapathConfiguration="&{false false false false false }" interface=lxc2fa596d351b7 k8sPodName=openstack/glance-ks-user-qp5rn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd;k8s:batch.kubernetes.io/job-name=glance-ks-user;k8s:component=ks-user;k8s:controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-ks-user;k8s:release_group=glance;" subsys=allocator level=info msg="Invalid state transition skipped" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 endpointState.from=waiting-for-identity endpointState.to=waiting-to-regenerate file=/go/src/github.com/cilium/cilium/pkg/endpoint/policy.go ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn line=611 subsys=endpoint level=info msg="Identity of endpoint changed" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=5052 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd,k8s:batch.kubernetes.io/job-name=glance-ks-user,k8s:component=ks-user,k8s:controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-ks-user,k8s:release_group=glance" ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=5052 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=b4ea6ecc79 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=5052 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=endpoint level=info msg="Successful endpoint creation" containerID=b4ea6ecc79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=5052 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=b4ea6ecc79 endpointID=7 k8sNamespace=openstack k8sPodName=glance-ks-user-qp5rn subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd k8s:batch.kubernetes.io/job-name=glance-ks-user k8s:component=ks-user k8s:controller-uid=6e2c7427-1da5-4fac-856a-f3b801577dcd k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-ks-user k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-ks-user k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=b4ea6ecc79 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=5052 ipv4=10.0.0.27 ipv6= k8sPodName=openstack/glance-ks-user-qp5rn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.143 329dcc84-4a3c-41be-9ebb-4796487fec92 default }" containerID=7c5b1bbc4ff9f4aaaeaebfa1af2b7786b13210de98cec890fa5fe392d7fa5dff datapathConfiguration="&{false false false false false }" interface=lxcb6d5677f3959 k8sPodName=openstack/glance-metadefs-load-7qqdj labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=7c5b1bbc4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=7c5b1bbc4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea;k8s:batch.kubernetes.io/job-name=glance-metadefs-load;k8s:component=metadefs_load;k8s:controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-metadefs-load;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=7c5b1bbc4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=18782 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea,k8s:batch.kubernetes.io/job-name=glance-metadefs-load,k8s:component=metadefs_load,k8s:controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-metadefs-load,k8s:release_group=glance" ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=7c5b1bbc4f datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=3398 identity=18782 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=7c5b1bbc4f datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=3398 identity=18782 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=endpoint level=info msg="Successful endpoint creation" containerID=7c5b1bbc4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3398 identity=18782 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=daemon level=info msg="Delete endpoint request" containerID=7c5b1bbc4f endpointID=3398 k8sNamespace=openstack k8sPodName=glance-metadefs-load-7qqdj subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea k8s:batch.kubernetes.io/job-name=glance-metadefs-load k8s:component=metadefs_load k8s:controller-uid=edfde0c4-e2f8-4419-ba92-9bef9cb8edea k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-metadefs-load k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-metadefs-load k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=7c5b1bbc4f datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=3398 identity=18782 ipv4=10.0.0.143 ipv6= k8sPodName=openstack/glance-metadefs-load-7qqdj subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.65 202a3a57-96c5-407a-b991-46f9a04c4fdf default }" containerID=53024d6cfdc56f3b09adccaf58a124738c1bce8108c6665e363ba9d9568617d5 datapathConfiguration="&{false false false false false }" interface=lxc5edbb9f56571 k8sPodName=openstack/glance-storage-init-brrj5 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=53024d6cfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=53024d6cfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:batch.kubernetes.io/controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8;k8s:batch.kubernetes.io/job-name=glance-storage-init;k8s:component=storage-init;k8s:controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=glance-storage-init;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=53024d6cfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=1201 identityLabels="k8s:application=glance,k8s:batch.kubernetes.io/controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8,k8s:batch.kubernetes.io/job-name=glance-storage-init,k8s:component=storage-init,k8s:controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=glance-storage-init,k8s:release_group=glance" ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=53024d6cfd datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=466 identity=1201 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=53024d6cfd datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=466 identity=1201 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=endpoint level=info msg="Successful endpoint creation" containerID=53024d6cfd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=1201 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=53024d6cfd endpointID=466 k8sNamespace=openstack k8sPodName=glance-storage-init-brrj5 subsys=daemon level=info msg="Releasing key" key="[k8s:application=glance k8s:batch.kubernetes.io/controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8 k8s:batch.kubernetes.io/job-name=glance-storage-init k8s:component=storage-init k8s:controller-uid=a7a17970-b5bb-42a2-86c4-c9161a4646c8 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=glance-storage-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=glance-storage-init k8s:release_group=glance]" subsys=allocator level=info msg="Removed endpoint" containerID=53024d6cfd datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=466 identity=1201 ipv4=10.0.0.65 ipv6= k8sPodName=openstack/glance-storage-init-brrj5 subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.199 2a49b086-6369-49e4-8b06-77078fb79b35 default }" containerID=64c3f4a3590568baf071af2c86d35c111a340b878de341b1f6dddab4ea9d4b03 datapathConfiguration="&{false false false false false }" interface=lxce02bd4428c54 k8sPodName=openstack/glance-api-7674956446-sjsz8 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=64c3f4a359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=64c3f4a359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=glance;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=glance-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=glance;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=64c3f4a359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=14024 identityLabels="k8s:application=glance,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=glance-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=glance" ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 oldIdentity="no identity" subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Waiting for endpoint to be generated" containerID=64c3f4a359 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1173 identity=14024 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=64c3f4a359 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1173 identity=14024 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 subsys=endpoint level=info msg="Successful endpoint creation" containerID=64c3f4a359 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1173 identity=14024 ipv4=10.0.0.199 ipv6= k8sPodName=openstack/glance-api-7674956446-sjsz8 subsys=daemon level=info msg="Create endpoint request" addressing="&{10.0.0.49 9a5ebedc-e2e8-407f-8a96-24bf2a8d78da default }" containerID=f84a8c977860cbff8b1b1c2807f0837671bbf95fa1b5ba69f2e7b189849f5dbc datapathConfiguration="&{false false false false false }" interface=lxc4ddc3f3e4f47 k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=f84a8c9778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=f84a8c9778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=conductor;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=f84a8c9778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=29962 identityLabels="k8s:application=staffeln,k8s:component=conductor,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-conductor,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=f84a8c9778 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=1744 identity=29962 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Create endpoint request" addressing="&{10.0.0.72 0ec79921-d5b8-4907-b12e-2038e6de4390 default }" containerID=c13cc8db389a4e05fc624ac72dc6204323446fb1eb371407f7df299451750404 datapathConfiguration="&{false false false false false }" interface=lxce86792545252 k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=c13cc8db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=c13cc8db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:component=api;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api;k8s:io.kubernetes.pod.namespace=openstack;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=c13cc8db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=32601 identityLabels="k8s:application=staffeln,k8s:component=api,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-api,k8s:io.kubernetes.pod.namespace=openstack,k8s:release_group=staffeln" ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=c13cc8db38 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=583 identity=32601 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.170 e1d14b43-ec7e-4754-b07a-5e2cff418f10 default }" containerID=44759b204448dd314f49add4a10a4ff0a02bdfb7b75b736ae158d0df3a8e50d4 datapathConfiguration="&{false false false false false }" interface=lxc88e7b7b4744d k8sPodName=openstack/staffeln-db-init-4zkvn labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=44759b2044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=44759b2044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887;k8s:batch.kubernetes.io/job-name=staffeln-db-init;k8s:component=db-init;k8s:controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-init;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=44759b2044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=15984 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887,k8s:batch.kubernetes.io/job-name=staffeln-db-init,k8s:component=db-init,k8s:controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-init,k8s:release_group=staffeln" ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=44759b2044 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=7 identity=15984 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=endpoint level=info msg="Rewrote endpoint BPF program" containerID=f84a8c9778 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=1744 identity=29962 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 subsys=endpoint level=info msg="Successful endpoint creation" containerID=f84a8c9778 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=1744 identity=29962 ipv4=10.0.0.49 ipv6= k8sPodName=openstack/staffeln-conductor-5fd9bcc55b-zsx58 subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=c13cc8db38 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=583 identity=32601 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh subsys=endpoint level=info msg="Successful endpoint creation" containerID=c13cc8db38 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=583 identity=32601 ipv4=10.0.0.72 ipv6= k8sPodName=openstack/staffeln-api-f6b7567f9-jzfbh subsys=daemon level=info msg="Rewrote endpoint BPF program" containerID=44759b2044 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=7 identity=15984 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=endpoint level=info msg="Successful endpoint creation" containerID=44759b2044 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=15984 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="regenerating all endpoints" reason= subsys=endpoint-manager level=info msg="Delete endpoint request" containerID=44759b2044 endpointID=7 k8sNamespace=openstack k8sPodName=staffeln-db-init-4zkvn subsys=daemon level=info msg="Releasing key" key="[k8s:application=staffeln k8s:batch.kubernetes.io/controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887 k8s:batch.kubernetes.io/job-name=staffeln-db-init k8s:component=db-init k8s:controller-uid=36c5d042-2f5b-4806-85d3-670bfd8fb887 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack k8s:io.cilium.k8s.namespace.labels.name=openstack k8s:io.cilium.k8s.policy.cluster=default k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-init k8s:io.kubernetes.pod.namespace=openstack k8s:job-name=staffeln-db-init k8s:release_group=staffeln]" subsys=allocator level=info msg="Removed endpoint" containerID=44759b2044 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=7 identity=15984 ipv4=10.0.0.170 ipv6= k8sPodName=openstack/staffeln-db-init-4zkvn subsys=endpoint level=info msg="Create endpoint request" addressing="&{10.0.0.57 10a771fc-de36-46f8-9eab-cccb4b3a460a default }" containerID=489c582317180612f76a736fee7385f691cd971f4f35480b8a42b4d763163f5d datapathConfiguration="&{false false false false false }" interface=lxc77fb8a05fa7c k8sPodName=openstack/staffeln-db-sync-jvgfd labels="[]" subsys=daemon sync-build=true level=info msg="New endpoint" containerID=489c582317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd subsys=endpoint level=info msg="Resolving identity labels (blocking)" containerID=489c582317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd subsys=endpoint level=info msg="Skipped non-kubernetes labels when labelling ciliumidentity. All labels will still be used in identity determination" labels="map[k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack]" subsys=crd-allocator level=info msg="Allocated new global key" key="k8s:application=staffeln;k8s:batch.kubernetes.io/controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69;k8s:batch.kubernetes.io/job-name=staffeln-db-sync;k8s:component=db-sync;k8s:controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69;k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack;k8s:io.cilium.k8s.namespace.labels.name=openstack;k8s:io.cilium.k8s.policy.cluster=default;k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync;k8s:io.kubernetes.pod.namespace=openstack;k8s:job-name=staffeln-db-sync;k8s:release_group=staffeln;" subsys=allocator level=info msg="Identity of endpoint changed" containerID=489c582317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=18492 identityLabels="k8s:application=staffeln,k8s:batch.kubernetes.io/controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69,k8s:batch.kubernetes.io/job-name=staffeln-db-sync,k8s:component=db-sync,k8s:controller-uid=84adb4b5-a39c-4f0e-a032-432561b99f69,k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=openstack,k8s:io.cilium.k8s.namespace.labels.name=openstack,k8s:io.cilium.k8s.policy.cluster=default,k8s:io.cilium.k8s.policy.serviceaccount=staffeln-db-sync,k8s:io.kubernetes.pod.namespace=openstack,k8s:job-name=staffeln-db-sync,k8s:release_group=staffeln" ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd oldIdentity="no identity" subsys=endpoint level=info msg="Waiting for endpoint to be generated" containerID=489c582317 datapathPolicyRevision=0 desiredPolicyRevision=0 endpointID=717 identity=18492 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd subsys=endpoint level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager level=info msg="Rewrote endpoint BPF program" containerID=489c582317 datapathPolicyRevision=0 desiredPolicyRevision=5 endpointID=717 identity=18492 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd subsys=endpoint level=info msg="Successful endpoint creation" containerID=489c582317 datapathPolicyRevision=5 desiredPolicyRevision=5 endpointID=717 identity=18492 ipv4=10.0.0.57 ipv6= k8sPodName=openstack/staffeln-db-sync-jvgfd subsys=daemon level=info msg="regenerating all endpoints" reason="one or more identities created or deleted" subsys=endpoint-manager